main
Large file — syntax highlighting disabled.
| 1 | { |
| 2 | "rules": [ |
| 3 | { |
| 4 | "id": "vendored-rules.generic.bicep.security.secure-parameter-for-secrets", |
| 5 | "languages": [ |
| 6 | "generic" |
| 7 | ], |
| 8 | "message": "Mark sensitive parameters with the @secure() decorator. This avoids logging the value or displaying it in the Azure portal, Azure CLI, or Azure PowerShell.", |
| 9 | "metadata": { |
| 10 | "category": "security", |
| 11 | "confidence": "LOW", |
| 12 | "cwe": [ |
| 13 | "CWE-532: Insertion of Sensitive Information into Log File" |
| 14 | ], |
| 15 | "impact": "LOW", |
| 16 | "likelihood": "LOW", |
| 17 | "owasp": [ |
| 18 | "A09:2021 - Security Logging and Monitoring Failures" |
| 19 | ], |
| 20 | "references": [ |
| 21 | "https://cwe.mitre.org/data/definitions/532.html", |
| 22 | "https://docs.microsoft.com/en-us/azure/azure-resource-manager/bicep/scenarios-secrets" |
| 23 | ], |
| 24 | "subcategory": [ |
| 25 | "audit" |
| 26 | ], |
| 27 | "technology": [ |
| 28 | "bicep" |
| 29 | ] |
| 30 | }, |
| 31 | "paths": { |
| 32 | "include": [ |
| 33 | "*.bicep" |
| 34 | ] |
| 35 | }, |
| 36 | "patterns": [ |
| 37 | { |
| 38 | "pattern": "param $NAME string" |
| 39 | }, |
| 40 | { |
| 41 | "pattern-not-inside": "@secure()\nparam $NAME string\n" |
| 42 | }, |
| 43 | { |
| 44 | "metavariable-regex": { |
| 45 | "metavariable": "$NAME", |
| 46 | "regex": "(?i).*(password|secret|token)" |
| 47 | } |
| 48 | } |
| 49 | ], |
| 50 | "severity": "WARNING" |
| 51 | }, |
| 52 | { |
| 53 | "id": "vendored-rules.generic.ci.audit.changed-semgrepignore", |
| 54 | "languages": [ |
| 55 | "generic" |
| 56 | ], |
| 57 | "message": "`$1` has been added to the .semgrepignore list of ignored paths. Someone from app-sec may want to audit these changes.", |
| 58 | "metadata": { |
| 59 | "category": "best-practice", |
| 60 | "references": [ |
| 61 | "https://semgrep.dev/docs/ignoring-files-folders-code/" |
| 62 | ], |
| 63 | "technology": [ |
| 64 | "semgrep" |
| 65 | ] |
| 66 | }, |
| 67 | "paths": { |
| 68 | "include": [ |
| 69 | ".semgrepignore" |
| 70 | ] |
| 71 | }, |
| 72 | "patterns": [ |
| 73 | { |
| 74 | "pattern-regex": "^(.*)$\n" |
| 75 | }, |
| 76 | { |
| 77 | "pattern-not-regex": "^\\n.*$\n" |
| 78 | }, |
| 79 | { |
| 80 | "pattern-not-regex": "^#.*$\n" |
| 81 | } |
| 82 | ], |
| 83 | "severity": "WARNING" |
| 84 | }, |
| 85 | { |
| 86 | "id": "vendored-rules.generic.ci.security.bash_reverse_shell", |
| 87 | "languages": [ |
| 88 | "generic" |
| 89 | ], |
| 90 | "message": "Semgrep found a bash reverse shell", |
| 91 | "metadata": { |
| 92 | "category": "security", |
| 93 | "confidence": "HIGH", |
| 94 | "cwe": [ |
| 95 | "CWE-94: Improper Control of Generation of Code ('Code Injection')" |
| 96 | ], |
| 97 | "cwe2022-top25": true, |
| 98 | "impact": "HIGH", |
| 99 | "likelihood": "MEDIUM", |
| 100 | "owasp": [ |
| 101 | "A03:2021 - Injection" |
| 102 | ], |
| 103 | "references": [ |
| 104 | "https://owasp.org/Top10/A03_2021-Injection" |
| 105 | ], |
| 106 | "subcategory": [ |
| 107 | "audit" |
| 108 | ], |
| 109 | "technology": [ |
| 110 | "ci" |
| 111 | ] |
| 112 | }, |
| 113 | "pattern-either": [ |
| 114 | { |
| 115 | "pattern": "sh -i >& /dev/udp/.../... 0>&1\n" |
| 116 | }, |
| 117 | { |
| 118 | "pattern": "<...>/dev/tcp/.../...; sh <&... >&... 2>&\n" |
| 119 | }, |
| 120 | { |
| 121 | "pattern": "<...>/dev/tcp/.../...; cat <&... | while read line; do $line 2>&... >&...;done\n" |
| 122 | }, |
| 123 | { |
| 124 | "pattern": "sh -i ...<...> /dev/tcp/.../... ...<&... 1>&... 2>&\n" |
| 125 | } |
| 126 | ], |
| 127 | "severity": "ERROR" |
| 128 | }, |
| 129 | { |
| 130 | "id": "vendored-rules.generic.gradle.security.build-gradle-password-hardcoded", |
| 131 | "languages": [ |
| 132 | "generic" |
| 133 | ], |
| 134 | "message": "A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive data, can be leaked and used by internal or external malicious actors. It is recommended to rotate the secret and retrieve them from a secure secret vault or Hardware Security Module (HSM), alternatively environment variables can be used if allowed by your company policy.", |
| 135 | "metadata": { |
| 136 | "category": "security", |
| 137 | "confidence": "LOW", |
| 138 | "cwe": [ |
| 139 | "CWE-798: Use of Hard-coded Credentials" |
| 140 | ], |
| 141 | "cwe2020-top25": true, |
| 142 | "cwe2021-top25": true, |
| 143 | "cwe2022-top25": true, |
| 144 | "impact": "HIGH", |
| 145 | "likelihood": "LOW", |
| 146 | "owasp": [ |
| 147 | "A07:2021 - Identification and Authentication Failures" |
| 148 | ], |
| 149 | "references": [ |
| 150 | "https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures" |
| 151 | ], |
| 152 | "source_rule_url": "https://semgrep.dev/playground/r/qNU2d1G/achufistov6_personal_org.groovy-build-gradle-password-hardcoded", |
| 153 | "subcategory": [ |
| 154 | "vuln" |
| 155 | ], |
| 156 | "technology": [ |
| 157 | "secrets" |
| 158 | ], |
| 159 | "vulnerability_class": [ |
| 160 | "Hard-coded Secrets" |
| 161 | ] |
| 162 | }, |
| 163 | "paths": { |
| 164 | "include": [ |
| 165 | "*build.gradle" |
| 166 | ] |
| 167 | }, |
| 168 | "patterns": [ |
| 169 | { |
| 170 | "pattern": "password = env[...] ?: \"$SECRET\"\n" |
| 171 | } |
| 172 | ], |
| 173 | "severity": "WARNING" |
| 174 | }, |
| 175 | { |
| 176 | "fix-regex": { |
| 177 | "regex": "{{(.*?)}}", |
| 178 | "replacement": "\"{{\\1}}\"" |
| 179 | }, |
| 180 | "id": "vendored-rules.generic.html-templates.security.unquoted-attribute-var", |
| 181 | "languages": [ |
| 182 | "generic" |
| 183 | ], |
| 184 | "message": "Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"{{ expr }}\".", |
| 185 | "metadata": { |
| 186 | "category": "security", |
| 187 | "confidence": "LOW", |
| 188 | "cwe": [ |
| 189 | "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" |
| 190 | ], |
| 191 | "cwe2021-top25": true, |
| 192 | "cwe2022-top25": true, |
| 193 | "impact": "MEDIUM", |
| 194 | "likelihood": "LOW", |
| 195 | "owasp": [ |
| 196 | "A07:2017 - Cross-Site Scripting (XSS)", |
| 197 | "A03:2021 - Injection" |
| 198 | ], |
| 199 | "references": [ |
| 200 | "https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss" |
| 201 | ], |
| 202 | "subcategory": [ |
| 203 | "audit" |
| 204 | ], |
| 205 | "technology": [ |
| 206 | "html-templates" |
| 207 | ] |
| 208 | }, |
| 209 | "paths": { |
| 210 | "include": [ |
| 211 | "*.html", |
| 212 | "*.mustache", |
| 213 | "*.hbs" |
| 214 | ] |
| 215 | }, |
| 216 | "patterns": [ |
| 217 | { |
| 218 | "pattern-inside": "<$TAG ...>" |
| 219 | }, |
| 220 | { |
| 221 | "pattern-not-inside": "=\"...\"" |
| 222 | }, |
| 223 | { |
| 224 | "pattern-not-inside": "='...'" |
| 225 | }, |
| 226 | { |
| 227 | "pattern": "{{ ... }}" |
| 228 | } |
| 229 | ], |
| 230 | "severity": "WARNING" |
| 231 | }, |
| 232 | { |
| 233 | "id": "vendored-rules.generic.html-templates.security.var-in-href", |
| 234 | "languages": [ |
| 235 | "generic" |
| 236 | ], |
| 237 | "message": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.", |
| 238 | "metadata": { |
| 239 | "category": "security", |
| 240 | "confidence": "LOW", |
| 241 | "cwe": [ |
| 242 | "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" |
| 243 | ], |
| 244 | "cwe2021-top25": true, |
| 245 | "cwe2022-top25": true, |
| 246 | "impact": "MEDIUM", |
| 247 | "likelihood": "LOW", |
| 248 | "owasp": [ |
| 249 | "A07:2017 - Cross-Site Scripting (XSS)", |
| 250 | "A03:2021 - Injection" |
| 251 | ], |
| 252 | "references": [ |
| 253 | "https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss#:~:text=javascript:%20URI", |
| 254 | "https://docs.djangoproject.com/en/3.1/ref/templates/builtins/#url", |
| 255 | "https://github.com/pugjs/pug/issues/2952", |
| 256 | "https://content-security-policy.com/" |
| 257 | ], |
| 258 | "subcategory": [ |
| 259 | "audit" |
| 260 | ], |
| 261 | "technology": [ |
| 262 | "html-templates" |
| 263 | ] |
| 264 | }, |
| 265 | "paths": { |
| 266 | "include": [ |
| 267 | "*.html", |
| 268 | "*.mustache", |
| 269 | "*.hbs" |
| 270 | ] |
| 271 | }, |
| 272 | "patterns": [ |
| 273 | { |
| 274 | "pattern-inside": "<a ...>" |
| 275 | }, |
| 276 | { |
| 277 | "pattern-either": [ |
| 278 | { |
| 279 | "pattern": "href = {{ ... }}" |
| 280 | }, |
| 281 | { |
| 282 | "pattern": "href = \"{{ ... }}\"" |
| 283 | }, |
| 284 | { |
| 285 | "pattern": "href = '{{ ... }}'" |
| 286 | } |
| 287 | ] |
| 288 | }, |
| 289 | { |
| 290 | "pattern-not-inside": "href = {{ url_for(...) ... }}" |
| 291 | }, |
| 292 | { |
| 293 | "pattern-not-inside": "href = \"{{ url_for(...) ... }}\"" |
| 294 | }, |
| 295 | { |
| 296 | "pattern-not-inside": "href = '{{ url_for(...) ... }}'" |
| 297 | }, |
| 298 | { |
| 299 | "pattern-not-inside": "href = \"/{{ ... }}\"" |
| 300 | }, |
| 301 | { |
| 302 | "pattern-not-inside": "href = '/{{ ... }}'" |
| 303 | } |
| 304 | ], |
| 305 | "severity": "WARNING" |
| 306 | }, |
| 307 | { |
| 308 | "id": "vendored-rules.generic.html-templates.security.var-in-script-src", |
| 309 | "languages": [ |
| 310 | "generic" |
| 311 | ], |
| 312 | "message": "Detected a template variable used as the 'src' in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent malicious URLs from being injected and could results in a cross-site scripting (XSS) vulnerability. Prefer not to dynamically generate the 'src' attribute and use static URLs instead. If you must do this, carefully check URLs against an allowlist and be sure to URL-encode the result.", |
| 313 | "metadata": { |
| 314 | "category": "security", |
| 315 | "confidence": "LOW", |
| 316 | "cwe": [ |
| 317 | "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" |
| 318 | ], |
| 319 | "cwe2021-top25": true, |
| 320 | "cwe2022-top25": true, |
| 321 | "impact": "MEDIUM", |
| 322 | "likelihood": "LOW", |
| 323 | "owasp": [ |
| 324 | "A07:2017 - Cross-Site Scripting (XSS)", |
| 325 | "A03:2021 - Injection" |
| 326 | ], |
| 327 | "references": [ |
| 328 | "https://adamj.eu/tech/2020/02/18/safely-including-data-for-javascript-in-a-django-template/?utm_campaign=Django%2BNewsletter&utm_medium=rss&utm_source=Django_Newsletter_12A", |
| 329 | "https://www.veracode.com/blog/secure-development/nodejs-template-engines-why-default-encoders-are-not-enough", |
| 330 | "https://github.com/ESAPI/owasp-esapi-js" |
| 331 | ], |
| 332 | "subcategory": [ |
| 333 | "audit" |
| 334 | ], |
| 335 | "technology": [ |
| 336 | "html-templates" |
| 337 | ] |
| 338 | }, |
| 339 | "paths": { |
| 340 | "include": [ |
| 341 | "*.mustache", |
| 342 | "*.hbs", |
| 343 | "*.html" |
| 344 | ] |
| 345 | }, |
| 346 | "patterns": [ |
| 347 | { |
| 348 | "pattern-inside": "<script ...>" |
| 349 | }, |
| 350 | { |
| 351 | "pattern-not-inside": "src = '...'" |
| 352 | }, |
| 353 | { |
| 354 | "pattern-not-inside": "src = \"...\"" |
| 355 | }, |
| 356 | { |
| 357 | "pattern-not-inside": "nonce = '...'" |
| 358 | }, |
| 359 | { |
| 360 | "pattern-not-inside": "nonce = \"...\"" |
| 361 | }, |
| 362 | { |
| 363 | "pattern": "{{ ... }}" |
| 364 | } |
| 365 | ], |
| 366 | "severity": "WARNING" |
| 367 | }, |
| 368 | { |
| 369 | "id": "vendored-rules.generic.html-templates.security.var-in-script-tag", |
| 370 | "languages": [ |
| 371 | "generic" |
| 372 | ], |
| 373 | "message": "Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need this data on the rendered page, consider placing it in the HTML portion (outside of a script tag). Alternatively, use a JavaScript-specific encoder, such as the one available in OWASP ESAPI. For Django, you may also consider using the 'json_script' template tag and retrieving the data in your script by using the element ID (e.g., `document.getElementById`).", |
| 374 | "metadata": { |
| 375 | "category": "security", |
| 376 | "confidence": "LOW", |
| 377 | "cwe": [ |
| 378 | "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" |
| 379 | ], |
| 380 | "cwe2021-top25": true, |
| 381 | "cwe2022-top25": true, |
| 382 | "impact": "MEDIUM", |
| 383 | "likelihood": "LOW", |
| 384 | "owasp": [ |
| 385 | "A07:2017 - Cross-Site Scripting (XSS)", |
| 386 | "A03:2021 - Injection" |
| 387 | ], |
| 388 | "references": [ |
| 389 | "https://adamj.eu/tech/2020/02/18/safely-including-data-for-javascript-in-a-django-template/?utm_campaign=Django%2BNewsletter&utm_medium=rss&utm_source=Django_Newsletter_12A", |
| 390 | "https://www.veracode.com/blog/secure-development/nodejs-template-engines-why-default-encoders-are-not-enough", |
| 391 | "https://github.com/ESAPI/owasp-esapi-js" |
| 392 | ], |
| 393 | "subcategory": [ |
| 394 | "audit" |
| 395 | ], |
| 396 | "technology": [ |
| 397 | "html-templates" |
| 398 | ] |
| 399 | }, |
| 400 | "paths": { |
| 401 | "include": [ |
| 402 | "*.mustache", |
| 403 | "*.hbs", |
| 404 | "*.html" |
| 405 | ] |
| 406 | }, |
| 407 | "patterns": [ |
| 408 | { |
| 409 | "pattern-inside": "<script ...> ... </script>" |
| 410 | }, |
| 411 | { |
| 412 | "pattern-not-inside": "<script ... $ATTR = \"...\" ...>" |
| 413 | }, |
| 414 | { |
| 415 | "pattern-not-inside": "<script ... $ATTR = '...' ...>" |
| 416 | }, |
| 417 | { |
| 418 | "pattern": "{{ ... }}" |
| 419 | } |
| 420 | ], |
| 421 | "severity": "WARNING" |
| 422 | }, |
| 423 | { |
| 424 | "fix-regex": { |
| 425 | "regex": "location\\s+([A-Za-z0-9/-_\\.]+)", |
| 426 | "replacement": "location \\1/" |
| 427 | }, |
| 428 | "id": "vendored-rules.generic.nginx.security.alias-path-traversal", |
| 429 | "languages": [ |
| 430 | "generic" |
| 431 | ], |
| 432 | "message": "The alias in this location block is subject to a path traversal because the location path does not end in a path separator (e.g., '/'). To fix, add a path separator to the end of the path.", |
| 433 | "metadata": { |
| 434 | "category": "security", |
| 435 | "confidence": "LOW", |
| 436 | "cwe": [ |
| 437 | "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" |
| 438 | ], |
| 439 | "cwe2021-top25": true, |
| 440 | "cwe2022-top25": true, |
| 441 | "impact": "LOW", |
| 442 | "likelihood": "LOW", |
| 443 | "owasp": [ |
| 444 | "A05:2017 - Broken Access Control", |
| 445 | "A01:2021 - Broken Access Control" |
| 446 | ], |
| 447 | "references": [ |
| 448 | "https://owasp.org/Top10/A01_2021-Broken_Access_Control", |
| 449 | "https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/", |
| 450 | "https://www.youtube.com/watch?v=CIhHpkybYsY", |
| 451 | "https://github.com/orangetw/My-Presentation-Slides/blob/main/data/2018-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out.pdf" |
| 452 | ], |
| 453 | "source-rule-url": "https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md", |
| 454 | "subcategory": [ |
| 455 | "audit" |
| 456 | ], |
| 457 | "technology": [ |
| 458 | "nginx" |
| 459 | ] |
| 460 | }, |
| 461 | "paths": { |
| 462 | "include": [ |
| 463 | "*.conf", |
| 464 | "*.vhost", |
| 465 | "sites-available/*", |
| 466 | "sites-enabled/*" |
| 467 | ] |
| 468 | }, |
| 469 | "patterns": [ |
| 470 | { |
| 471 | "pattern": "location $...LOCATION {\n ...\n alias .../;\n ...\n}\n" |
| 472 | }, |
| 473 | { |
| 474 | "metavariable-pattern": { |
| 475 | "metavariable": "$...LOCATION", |
| 476 | "pattern-regex": "^.*[^/]$" |
| 477 | } |
| 478 | } |
| 479 | ], |
| 480 | "severity": "WARNING" |
| 481 | }, |
| 482 | { |
| 483 | "id": "vendored-rules.generic.nginx.security.dynamic-proxy-host", |
| 484 | "languages": [ |
| 485 | "generic" |
| 486 | ], |
| 487 | "message": "The host for this proxy URL is dynamically determined. This can be dangerous if the host can be injected by an attacker because it may forcibly alter destination of the proxy. Consider hardcoding acceptable destinations and retrieving them with 'map' or something similar.", |
| 488 | "metadata": { |
| 489 | "category": "security", |
| 490 | "confidence": "MEDIUM", |
| 491 | "cwe": [ |
| 492 | "CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')" |
| 493 | ], |
| 494 | "impact": "MEDIUM", |
| 495 | "likelihood": "LOW", |
| 496 | "owasp": [ |
| 497 | "A01:2021 - Broken Access Control" |
| 498 | ], |
| 499 | "references": [ |
| 500 | "https://nginx.org/en/docs/http/ngx_http_map_module.html" |
| 501 | ], |
| 502 | "source-rule-url": "https://github.com/yandex/gixy/blob/master/docs/en/plugins/ssrf.md", |
| 503 | "subcategory": [ |
| 504 | "audit" |
| 505 | ], |
| 506 | "technology": [ |
| 507 | "nginx" |
| 508 | ] |
| 509 | }, |
| 510 | "paths": { |
| 511 | "include": [ |
| 512 | "*.conf", |
| 513 | "*.vhost", |
| 514 | "sites-available/*", |
| 515 | "sites-enabled/*" |
| 516 | ] |
| 517 | }, |
| 518 | "pattern-either": [ |
| 519 | { |
| 520 | "pattern": "proxy_pass $SCHEME://$$HOST ...;" |
| 521 | }, |
| 522 | { |
| 523 | "pattern": "proxy_pass $$SCHEME://$$HOST ...;" |
| 524 | } |
| 525 | ], |
| 526 | "severity": "WARNING" |
| 527 | }, |
| 528 | { |
| 529 | "id": "vendored-rules.generic.nginx.security.dynamic-proxy-scheme", |
| 530 | "languages": [ |
| 531 | "generic" |
| 532 | ], |
| 533 | "message": "The protocol scheme for this proxy is dynamically determined. This can be dangerous if the scheme can be injected by an attacker because it may forcibly alter the connection scheme. Consider hardcoding a scheme for this proxy.", |
| 534 | "metadata": { |
| 535 | "category": "security", |
| 536 | "confidence": "MEDIUM", |
| 537 | "cwe": [ |
| 538 | "CWE-16: CWE CATEGORY: Configuration" |
| 539 | ], |
| 540 | "impact": "LOW", |
| 541 | "likelihood": "LOW", |
| 542 | "owasp": [ |
| 543 | "A06:2017 - Security Misconfiguration", |
| 544 | "A05:2021 - Security Misconfiguration" |
| 545 | ], |
| 546 | "references": [ |
| 547 | "https://github.com/yandex/gixy/blob/master/docs/en/plugins/ssrf.md" |
| 548 | ], |
| 549 | "subcategory": [ |
| 550 | "audit" |
| 551 | ], |
| 552 | "technology": [ |
| 553 | "nginx" |
| 554 | ] |
| 555 | }, |
| 556 | "paths": { |
| 557 | "include": [ |
| 558 | "*.conf", |
| 559 | "*.vhost", |
| 560 | "sites-available/*", |
| 561 | "sites-enabled/*" |
| 562 | ] |
| 563 | }, |
| 564 | "pattern": "proxy_pass $$SCHEME:// ...;", |
| 565 | "severity": "WARNING" |
| 566 | }, |
| 567 | { |
| 568 | "id": "vendored-rules.generic.nginx.security.header-injection", |
| 569 | "languages": [ |
| 570 | "generic" |
| 571 | ], |
| 572 | "message": "The $$VARIABLE path parameter is added as a header in the response. This could allow an attacker to inject a newline and add a new header into the response. This is called HTTP response splitting. To fix, do not allow whitespace in the path parameter: '[^\\s]+'.", |
| 573 | "metadata": { |
| 574 | "category": "security", |
| 575 | "confidence": "MEDIUM", |
| 576 | "cwe": [ |
| 577 | "CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')" |
| 578 | ], |
| 579 | "impact": "MEDIUM", |
| 580 | "likelihood": "LOW", |
| 581 | "owasp": [ |
| 582 | "A03:2021 - Injection" |
| 583 | ], |
| 584 | "references": [ |
| 585 | "https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md", |
| 586 | "https://owasp.org/www-community/attacks/HTTP_Response_Splitting" |
| 587 | ], |
| 588 | "subcategory": [ |
| 589 | "audit" |
| 590 | ], |
| 591 | "technology": [ |
| 592 | "nginx" |
| 593 | ] |
| 594 | }, |
| 595 | "paths": { |
| 596 | "include": [ |
| 597 | "*.conf", |
| 598 | "*.vhost", |
| 599 | "sites-available/*", |
| 600 | "sites-enabled/*" |
| 601 | ] |
| 602 | }, |
| 603 | "pattern": "location ... <$VARIABLE> ... {\n ...\n add_header ... $$VARIABLE\n ...\n}\n", |
| 604 | "severity": "ERROR" |
| 605 | }, |
| 606 | { |
| 607 | "id": "vendored-rules.generic.nginx.security.header-redefinition", |
| 608 | "languages": [ |
| 609 | "generic" |
| 610 | ], |
| 611 | "message": "The 'add_header' directive is called in a 'location' block after headers have been set at the server block. Calling 'add_header' in the location block will actually overwrite the headers defined in the server block, no matter which headers are set. To fix this, explicitly set all headers or set all headers in the server block.", |
| 612 | "metadata": { |
| 613 | "category": "security", |
| 614 | "confidence": "LOW", |
| 615 | "cwe": [ |
| 616 | "CWE-16: CWE CATEGORY: Configuration" |
| 617 | ], |
| 618 | "impact": "LOW", |
| 619 | "likelihood": "LOW", |
| 620 | "owasp": [ |
| 621 | "A06:2017 - Security Misconfiguration", |
| 622 | "A05:2021 - Security Misconfiguration" |
| 623 | ], |
| 624 | "references": [ |
| 625 | "https://github.com/yandex/gixy/blob/master/docs/en/plugins/addheaderredefinition.md" |
| 626 | ], |
| 627 | "subcategory": [ |
| 628 | "audit" |
| 629 | ], |
| 630 | "technology": [ |
| 631 | "nginx" |
| 632 | ] |
| 633 | }, |
| 634 | "paths": { |
| 635 | "include": [ |
| 636 | "*.conf", |
| 637 | "*.vhost", |
| 638 | "sites-available/*", |
| 639 | "sites-enabled/*" |
| 640 | ] |
| 641 | }, |
| 642 | "patterns": [ |
| 643 | { |
| 644 | "pattern-inside": "server {\n ...\n add_header ...;\n ...\n ...\n}\n" |
| 645 | }, |
| 646 | { |
| 647 | "pattern-inside": "location ... {\n ...\n ...\n}\n" |
| 648 | }, |
| 649 | { |
| 650 | "pattern": "add_header ...;" |
| 651 | } |
| 652 | ], |
| 653 | "severity": "WARNING" |
| 654 | }, |
| 655 | { |
| 656 | "id": "vendored-rules.generic.nginx.security.insecure-redirect", |
| 657 | "languages": [ |
| 658 | "generic" |
| 659 | ], |
| 660 | "message": "Detected an insecure redirect in this nginx configuration. If no scheme is specified, nginx will forward the request with the incoming scheme. This could result in unencrypted communications. To fix this, include the 'https' scheme.", |
| 661 | "metadata": { |
| 662 | "category": "security", |
| 663 | "confidence": "LOW", |
| 664 | "cwe": [ |
| 665 | "CWE-319: Cleartext Transmission of Sensitive Information" |
| 666 | ], |
| 667 | "impact": "LOW", |
| 668 | "likelihood": "LOW", |
| 669 | "owasp": [ |
| 670 | "A03:2017 - Sensitive Data Exposure", |
| 671 | "A02:2021 - Cryptographic Failures" |
| 672 | ], |
| 673 | "references": [ |
| 674 | "https://owasp.org/Top10/A02_2021-Cryptographic_Failures" |
| 675 | ], |
| 676 | "subcategory": [ |
| 677 | "audit" |
| 678 | ], |
| 679 | "technology": [ |
| 680 | "nginx" |
| 681 | ] |
| 682 | }, |
| 683 | "paths": { |
| 684 | "include": [ |
| 685 | "*.conf", |
| 686 | "*.vhost", |
| 687 | "sites-available/*", |
| 688 | "sites-enabled/*" |
| 689 | ] |
| 690 | }, |
| 691 | "patterns": [ |
| 692 | { |
| 693 | "pattern-either": [ |
| 694 | { |
| 695 | "pattern": "rewrite ... redirect" |
| 696 | }, |
| 697 | { |
| 698 | "pattern": "rewrite ... permanent" |
| 699 | } |
| 700 | ] |
| 701 | }, |
| 702 | { |
| 703 | "pattern-not-inside": "rewrite ... https ... $host ... redirect" |
| 704 | }, |
| 705 | { |
| 706 | "pattern-not-inside": "rewrite ... https ... $host ... permanent" |
| 707 | }, |
| 708 | { |
| 709 | "pattern-not-regex": "(?i)https:\\/\\/" |
| 710 | } |
| 711 | ], |
| 712 | "severity": "WARNING" |
| 713 | }, |
| 714 | { |
| 715 | "id": "vendored-rules.generic.nginx.security.insecure-ssl-version", |
| 716 | "languages": [ |
| 717 | "generic" |
| 718 | ], |
| 719 | "message": "Detected use of an insecure SSL version. Secure SSL versions are TLSv1.2 and TLS1.3; older versions are known to be broken and are susceptible to attacks. Prefer use of TLSv1.2 or later.", |
| 720 | "metadata": { |
| 721 | "category": "security", |
| 722 | "confidence": "HIGH", |
| 723 | "cwe": [ |
| 724 | "CWE-326: Inadequate Encryption Strength" |
| 725 | ], |
| 726 | "impact": "MEDIUM", |
| 727 | "likelihood": "MEDIUM", |
| 728 | "owasp": [ |
| 729 | "A03:2017 - Sensitive Data Exposure", |
| 730 | "A02:2021 - Cryptographic Failures" |
| 731 | ], |
| 732 | "references": [ |
| 733 | "https://www.acunetix.com/blog/web-security-zone/hardening-nginx/", |
| 734 | "https://www.acunetix.com/blog/articles/tls-ssl-cipher-hardening/" |
| 735 | ], |
| 736 | "subcategory": [ |
| 737 | "audit" |
| 738 | ], |
| 739 | "technology": [ |
| 740 | "nginx" |
| 741 | ] |
| 742 | }, |
| 743 | "paths": { |
| 744 | "include": [ |
| 745 | "*.conf", |
| 746 | "*.vhost", |
| 747 | "sites-available/*", |
| 748 | "sites-enabled/*" |
| 749 | ] |
| 750 | }, |
| 751 | "patterns": [ |
| 752 | { |
| 753 | "pattern-not": "ssl_protocols TLSv1.2 TLSv1.3;" |
| 754 | }, |
| 755 | { |
| 756 | "pattern-not": "ssl_protocols TLSv1.3 TLSv1.2;" |
| 757 | }, |
| 758 | { |
| 759 | "pattern-not": "ssl_protocols TLSv1.2;" |
| 760 | }, |
| 761 | { |
| 762 | "pattern-not": "ssl_protocols TLSv1.3;" |
| 763 | }, |
| 764 | { |
| 765 | "pattern": "ssl_protocols ...;" |
| 766 | } |
| 767 | ], |
| 768 | "severity": "WARNING" |
| 769 | }, |
| 770 | { |
| 771 | "id": "vendored-rules.generic.nginx.security.missing-internal", |
| 772 | "languages": [ |
| 773 | "generic" |
| 774 | ], |
| 775 | "message": "This location block contains a 'proxy_pass' directive but does not contain the 'internal' directive. The 'internal' directive restricts access to this location to internal requests. Without 'internal', an attacker could use your server for server-side request forgeries (SSRF). Include the 'internal' directive in this block to limit exposure.", |
| 776 | "metadata": { |
| 777 | "category": "security", |
| 778 | "confidence": "LOW", |
| 779 | "cwe": [ |
| 780 | "CWE-16: CWE CATEGORY: Configuration" |
| 781 | ], |
| 782 | "impact": "LOW", |
| 783 | "likelihood": "LOW", |
| 784 | "owasp": [ |
| 785 | "A06:2017 - Security Misconfiguration", |
| 786 | "A05:2021 - Security Misconfiguration" |
| 787 | ], |
| 788 | "references": [ |
| 789 | "https://github.com/yandex/gixy/blob/master/docs/en/plugins/ssrf.md", |
| 790 | "https://nginx.org/en/docs/http/ngx_http_core_module.html#internal" |
| 791 | ], |
| 792 | "subcategory": [ |
| 793 | "audit" |
| 794 | ], |
| 795 | "technology": [ |
| 796 | "nginx" |
| 797 | ] |
| 798 | }, |
| 799 | "options": { |
| 800 | "generic_ellipsis_max_span": 0, |
| 801 | "generic_engine": "aliengrep" |
| 802 | }, |
| 803 | "paths": { |
| 804 | "include": [ |
| 805 | "*.conf", |
| 806 | "*.vhost", |
| 807 | "sites-available/*", |
| 808 | "sites-enabled/*" |
| 809 | ] |
| 810 | }, |
| 811 | "patterns": [ |
| 812 | { |
| 813 | "pattern-inside": "location ... {\n ....\n ....\n}\n" |
| 814 | }, |
| 815 | { |
| 816 | "pattern-not-inside": "location ... {\n ....\n internal;\n ....\n}\n" |
| 817 | }, |
| 818 | { |
| 819 | "pattern": "proxy_pass $...URL;" |
| 820 | }, |
| 821 | { |
| 822 | "metavariable-regex": { |
| 823 | "metavariable": "$...URL", |
| 824 | "regex": "(.*\\$.*)" |
| 825 | } |
| 826 | } |
| 827 | ], |
| 828 | "severity": "WARNING" |
| 829 | }, |
| 830 | { |
| 831 | "id": "vendored-rules.generic.nginx.security.missing-ssl-version", |
| 832 | "languages": [ |
| 833 | "generic" |
| 834 | ], |
| 835 | "message": "This server configuration is missing the 'ssl_protocols' directive. By default, this server will use 'ssl_protocols TLSv1 TLSv1.1 TLSv1.2', and versions older than TLSv1.2 are known to be broken. Explicitly specify 'ssl_protocols TLSv1.2 TLSv1.3' to use secure TLS versions.", |
| 836 | "metadata": { |
| 837 | "category": "security", |
| 838 | "confidence": "MEDIUM", |
| 839 | "cwe": [ |
| 840 | "CWE-326: Inadequate Encryption Strength" |
| 841 | ], |
| 842 | "impact": "MEDIUM", |
| 843 | "likelihood": "LOW", |
| 844 | "owasp": [ |
| 845 | "A03:2017 - Sensitive Data Exposure", |
| 846 | "A02:2021 - Cryptographic Failures" |
| 847 | ], |
| 848 | "references": [ |
| 849 | "https://www.acunetix.com/blog/web-security-zone/hardening-nginx/", |
| 850 | "https://nginx.org/en/docs/http/configuring_https_servers.html" |
| 851 | ], |
| 852 | "subcategory": [ |
| 853 | "audit" |
| 854 | ], |
| 855 | "technology": [ |
| 856 | "nginx" |
| 857 | ] |
| 858 | }, |
| 859 | "paths": { |
| 860 | "include": [ |
| 861 | "*.conf", |
| 862 | "*.vhost", |
| 863 | "sites-available/*", |
| 864 | "sites-enabled/*" |
| 865 | ] |
| 866 | }, |
| 867 | "patterns": [ |
| 868 | { |
| 869 | "pattern": "server { ... listen $PORT ssl; ... }" |
| 870 | }, |
| 871 | { |
| 872 | "pattern-not-inside": "server { ... ssl_protocols ... }" |
| 873 | } |
| 874 | ], |
| 875 | "severity": "WARNING" |
| 876 | }, |
| 877 | { |
| 878 | "id": "vendored-rules.generic.nginx.security.possible-nginx-h2c-smuggling", |
| 879 | "languages": [ |
| 880 | "generic" |
| 881 | ], |
| 882 | "message": "Conditions for Nginx H2C smuggling identified. H2C smuggling allows upgrading HTTP/1.1 connections to lesser-known HTTP/2 over cleartext (h2c) connections which can allow a bypass of reverse proxy access controls, and lead to long-lived, unrestricted HTTP traffic directly to back-end servers. To mitigate: WebSocket support required: Allow only the value websocket for HTTP/1.1 upgrade headers (e.g., Upgrade: websocket). WebSocket support not required: Do not forward Upgrade headers.", |
| 883 | "metadata": { |
| 884 | "category": "security", |
| 885 | "confidence": "MEDIUM", |
| 886 | "cwe": [ |
| 887 | "CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" |
| 888 | ], |
| 889 | "impact": "LOW", |
| 890 | "likelihood": "LOW", |
| 891 | "owasp": [ |
| 892 | "A04:2021 - Insecure Design" |
| 893 | ], |
| 894 | "references": [ |
| 895 | "https://labs.bishopfox.com/tech-blog/h2c-smuggling-request-smuggling-via-http/2-cleartext-h2c" |
| 896 | ], |
| 897 | "subcategory": [ |
| 898 | "audit" |
| 899 | ], |
| 900 | "technology": [ |
| 901 | "nginx" |
| 902 | ] |
| 903 | }, |
| 904 | "paths": { |
| 905 | "include": [ |
| 906 | "*.conf", |
| 907 | "*.vhost", |
| 908 | "sites-available/*", |
| 909 | "sites-enabled/*" |
| 910 | ] |
| 911 | }, |
| 912 | "patterns": [ |
| 913 | { |
| 914 | "pattern-either": [ |
| 915 | { |
| 916 | "pattern": "proxy_http_version 1.1 ...;\n...\nproxy_set_header Upgrade ...;\n...\nproxy_set_header Connection ...;\n" |
| 917 | }, |
| 918 | { |
| 919 | "pattern": "proxy_set_header Upgrade ...;\n...\nproxy_set_header Connection ...;\n...\nproxy_http_version 1.1 ...;\n" |
| 920 | }, |
| 921 | { |
| 922 | "pattern": "proxy_set_header Upgrade ...;\n...\nproxy_http_version 1.1 ...;\n...\nproxy_set_header Connection ...;\n" |
| 923 | } |
| 924 | ] |
| 925 | }, |
| 926 | { |
| 927 | "pattern-inside": "location ... {\n ...\n}\n" |
| 928 | } |
| 929 | ], |
| 930 | "severity": "WARNING" |
| 931 | }, |
| 932 | { |
| 933 | "id": "vendored-rules.generic.nginx.security.request-host-used", |
| 934 | "languages": [ |
| 935 | "generic" |
| 936 | ], |
| 937 | "message": "'$http_host' and '$host' variables may contain a malicious value from attacker controlled 'Host' request header. Use an explicitly configured host value or a allow list for validation.", |
| 938 | "metadata": { |
| 939 | "category": "security", |
| 940 | "confidence": "MEDIUM", |
| 941 | "cwe": [ |
| 942 | "CWE-290: Authentication Bypass by Spoofing" |
| 943 | ], |
| 944 | "impact": "LOW", |
| 945 | "likelihood": "LOW", |
| 946 | "owasp": [ |
| 947 | "A07:2021 - Identification and Authentication Failures" |
| 948 | ], |
| 949 | "references": [ |
| 950 | "https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md", |
| 951 | "https://portswigger.net/web-security/host-header" |
| 952 | ], |
| 953 | "subcategory": [ |
| 954 | "audit" |
| 955 | ], |
| 956 | "technology": [ |
| 957 | "nginx" |
| 958 | ] |
| 959 | }, |
| 960 | "paths": { |
| 961 | "include": [ |
| 962 | "*conf*", |
| 963 | "*nginx*", |
| 964 | "*vhost*", |
| 965 | "sites-available/*", |
| 966 | "sites-enabled/*" |
| 967 | ] |
| 968 | }, |
| 969 | "pattern-either": [ |
| 970 | { |
| 971 | "pattern": "$http_host" |
| 972 | }, |
| 973 | { |
| 974 | "pattern": "$host" |
| 975 | } |
| 976 | ], |
| 977 | "severity": "WARNING" |
| 978 | }, |
| 979 | { |
| 980 | "id": "vendored-rules.generic.secrets.gitleaks.adafruit-api-key", |
| 981 | "languages": [ |
| 982 | "regex" |
| 983 | ], |
| 984 | "message": "A gitleaks Adafruit API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 985 | "metadata": { |
| 986 | "category": "security", |
| 987 | "confidence": "LOW", |
| 988 | "cwe": [ |
| 989 | "CWE-798: Use of Hard-coded Credentials" |
| 990 | ], |
| 991 | "cwe2021-top25": true, |
| 992 | "cwe2022-top25": true, |
| 993 | "impact": "MEDIUM", |
| 994 | "likelihood": "LOW", |
| 995 | "owasp": [ |
| 996 | "A07:2021 - Identification and Authentication Failures" |
| 997 | ], |
| 998 | "references": [ |
| 999 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1000 | ], |
| 1001 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1002 | "subcategory": [ |
| 1003 | "vuln" |
| 1004 | ], |
| 1005 | "technology": [ |
| 1006 | "gitleaks" |
| 1007 | ] |
| 1008 | }, |
| 1009 | "patterns": [ |
| 1010 | { |
| 1011 | "pattern-regex": "(?i)(?:adafruit)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1012 | } |
| 1013 | ], |
| 1014 | "severity": "INFO" |
| 1015 | }, |
| 1016 | { |
| 1017 | "id": "vendored-rules.generic.secrets.gitleaks.adobe-client-id", |
| 1018 | "languages": [ |
| 1019 | "regex" |
| 1020 | ], |
| 1021 | "message": "A gitleaks Adobe Client ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1022 | "metadata": { |
| 1023 | "category": "security", |
| 1024 | "confidence": "LOW", |
| 1025 | "cwe": [ |
| 1026 | "CWE-798: Use of Hard-coded Credentials" |
| 1027 | ], |
| 1028 | "cwe2021-top25": true, |
| 1029 | "cwe2022-top25": true, |
| 1030 | "impact": "MEDIUM", |
| 1031 | "likelihood": "LOW", |
| 1032 | "owasp": [ |
| 1033 | "A07:2021 - Identification and Authentication Failures" |
| 1034 | ], |
| 1035 | "references": [ |
| 1036 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1037 | ], |
| 1038 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1039 | "subcategory": [ |
| 1040 | "vuln" |
| 1041 | ], |
| 1042 | "technology": [ |
| 1043 | "gitleaks" |
| 1044 | ] |
| 1045 | }, |
| 1046 | "patterns": [ |
| 1047 | { |
| 1048 | "pattern-regex": "(?i)(?:adobe)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1049 | } |
| 1050 | ], |
| 1051 | "severity": "INFO" |
| 1052 | }, |
| 1053 | { |
| 1054 | "id": "vendored-rules.generic.secrets.gitleaks.adobe-client-secret", |
| 1055 | "languages": [ |
| 1056 | "regex" |
| 1057 | ], |
| 1058 | "message": "A gitleaks Adobe Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1059 | "metadata": { |
| 1060 | "category": "security", |
| 1061 | "confidence": "LOW", |
| 1062 | "cwe": [ |
| 1063 | "CWE-798: Use of Hard-coded Credentials" |
| 1064 | ], |
| 1065 | "cwe2021-top25": true, |
| 1066 | "cwe2022-top25": true, |
| 1067 | "impact": "MEDIUM", |
| 1068 | "likelihood": "LOW", |
| 1069 | "owasp": [ |
| 1070 | "A07:2021 - Identification and Authentication Failures" |
| 1071 | ], |
| 1072 | "references": [ |
| 1073 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1074 | ], |
| 1075 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1076 | "subcategory": [ |
| 1077 | "vuln" |
| 1078 | ], |
| 1079 | "technology": [ |
| 1080 | "gitleaks" |
| 1081 | ] |
| 1082 | }, |
| 1083 | "patterns": [ |
| 1084 | { |
| 1085 | "pattern-regex": "(?i)\\b((p8e-)(?i)[a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1086 | } |
| 1087 | ], |
| 1088 | "severity": "INFO" |
| 1089 | }, |
| 1090 | { |
| 1091 | "id": "vendored-rules.generic.secrets.gitleaks.age-secret-key", |
| 1092 | "languages": [ |
| 1093 | "regex" |
| 1094 | ], |
| 1095 | "message": "A gitleaks Age Secret Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1096 | "metadata": { |
| 1097 | "category": "security", |
| 1098 | "confidence": "LOW", |
| 1099 | "cwe": [ |
| 1100 | "CWE-798: Use of Hard-coded Credentials" |
| 1101 | ], |
| 1102 | "cwe2021-top25": true, |
| 1103 | "cwe2022-top25": true, |
| 1104 | "impact": "MEDIUM", |
| 1105 | "likelihood": "LOW", |
| 1106 | "owasp": [ |
| 1107 | "A07:2021 - Identification and Authentication Failures" |
| 1108 | ], |
| 1109 | "references": [ |
| 1110 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1111 | ], |
| 1112 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1113 | "subcategory": [ |
| 1114 | "vuln" |
| 1115 | ], |
| 1116 | "technology": [ |
| 1117 | "gitleaks" |
| 1118 | ] |
| 1119 | }, |
| 1120 | "patterns": [ |
| 1121 | { |
| 1122 | "pattern-regex": "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}" |
| 1123 | } |
| 1124 | ], |
| 1125 | "severity": "INFO" |
| 1126 | }, |
| 1127 | { |
| 1128 | "id": "vendored-rules.generic.secrets.gitleaks.airtable-api-key", |
| 1129 | "languages": [ |
| 1130 | "regex" |
| 1131 | ], |
| 1132 | "message": "A gitleaks Airtable API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1133 | "metadata": { |
| 1134 | "category": "security", |
| 1135 | "confidence": "LOW", |
| 1136 | "cwe": [ |
| 1137 | "CWE-798: Use of Hard-coded Credentials" |
| 1138 | ], |
| 1139 | "cwe2021-top25": true, |
| 1140 | "cwe2022-top25": true, |
| 1141 | "impact": "MEDIUM", |
| 1142 | "likelihood": "LOW", |
| 1143 | "owasp": [ |
| 1144 | "A07:2021 - Identification and Authentication Failures" |
| 1145 | ], |
| 1146 | "references": [ |
| 1147 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1148 | ], |
| 1149 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1150 | "subcategory": [ |
| 1151 | "vuln" |
| 1152 | ], |
| 1153 | "technology": [ |
| 1154 | "gitleaks" |
| 1155 | ] |
| 1156 | }, |
| 1157 | "patterns": [ |
| 1158 | { |
| 1159 | "pattern-regex": "(?i)(?:airtable)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{17})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1160 | } |
| 1161 | ], |
| 1162 | "severity": "INFO" |
| 1163 | }, |
| 1164 | { |
| 1165 | "id": "vendored-rules.generic.secrets.gitleaks.algolia-api-key", |
| 1166 | "languages": [ |
| 1167 | "regex" |
| 1168 | ], |
| 1169 | "message": "A gitleaks Algolia API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1170 | "metadata": { |
| 1171 | "category": "security", |
| 1172 | "confidence": "LOW", |
| 1173 | "cwe": [ |
| 1174 | "CWE-798: Use of Hard-coded Credentials" |
| 1175 | ], |
| 1176 | "cwe2021-top25": true, |
| 1177 | "cwe2022-top25": true, |
| 1178 | "impact": "MEDIUM", |
| 1179 | "likelihood": "LOW", |
| 1180 | "owasp": [ |
| 1181 | "A07:2021 - Identification and Authentication Failures" |
| 1182 | ], |
| 1183 | "references": [ |
| 1184 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1185 | ], |
| 1186 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1187 | "subcategory": [ |
| 1188 | "vuln" |
| 1189 | ], |
| 1190 | "technology": [ |
| 1191 | "gitleaks" |
| 1192 | ] |
| 1193 | }, |
| 1194 | "patterns": [ |
| 1195 | { |
| 1196 | "pattern-regex": "(?i)(?:algolia)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1197 | } |
| 1198 | ], |
| 1199 | "severity": "INFO" |
| 1200 | }, |
| 1201 | { |
| 1202 | "id": "vendored-rules.generic.secrets.gitleaks.alibaba-access-key-id", |
| 1203 | "languages": [ |
| 1204 | "regex" |
| 1205 | ], |
| 1206 | "message": "A gitleaks Alibaba Access Key ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1207 | "metadata": { |
| 1208 | "category": "security", |
| 1209 | "confidence": "LOW", |
| 1210 | "cwe": [ |
| 1211 | "CWE-798: Use of Hard-coded Credentials" |
| 1212 | ], |
| 1213 | "cwe2021-top25": true, |
| 1214 | "cwe2022-top25": true, |
| 1215 | "impact": "MEDIUM", |
| 1216 | "likelihood": "LOW", |
| 1217 | "owasp": [ |
| 1218 | "A07:2021 - Identification and Authentication Failures" |
| 1219 | ], |
| 1220 | "references": [ |
| 1221 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1222 | ], |
| 1223 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1224 | "subcategory": [ |
| 1225 | "vuln" |
| 1226 | ], |
| 1227 | "technology": [ |
| 1228 | "gitleaks" |
| 1229 | ] |
| 1230 | }, |
| 1231 | "patterns": [ |
| 1232 | { |
| 1233 | "pattern-regex": "(?i)\\b((LTAI)(?i)[a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1234 | } |
| 1235 | ], |
| 1236 | "severity": "INFO" |
| 1237 | }, |
| 1238 | { |
| 1239 | "id": "vendored-rules.generic.secrets.gitleaks.alibaba-secret-key", |
| 1240 | "languages": [ |
| 1241 | "regex" |
| 1242 | ], |
| 1243 | "message": "A gitleaks Alibaba Secret Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1244 | "metadata": { |
| 1245 | "category": "security", |
| 1246 | "confidence": "LOW", |
| 1247 | "cwe": [ |
| 1248 | "CWE-798: Use of Hard-coded Credentials" |
| 1249 | ], |
| 1250 | "cwe2021-top25": true, |
| 1251 | "cwe2022-top25": true, |
| 1252 | "impact": "MEDIUM", |
| 1253 | "likelihood": "LOW", |
| 1254 | "owasp": [ |
| 1255 | "A07:2021 - Identification and Authentication Failures" |
| 1256 | ], |
| 1257 | "references": [ |
| 1258 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1259 | ], |
| 1260 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1261 | "subcategory": [ |
| 1262 | "vuln" |
| 1263 | ], |
| 1264 | "technology": [ |
| 1265 | "gitleaks" |
| 1266 | ] |
| 1267 | }, |
| 1268 | "patterns": [ |
| 1269 | { |
| 1270 | "pattern-regex": "(?i)(?:alibaba)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1271 | } |
| 1272 | ], |
| 1273 | "severity": "INFO" |
| 1274 | }, |
| 1275 | { |
| 1276 | "id": "vendored-rules.generic.secrets.gitleaks.asana-client-id", |
| 1277 | "languages": [ |
| 1278 | "regex" |
| 1279 | ], |
| 1280 | "message": "A gitleaks Asana Client ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1281 | "metadata": { |
| 1282 | "category": "security", |
| 1283 | "confidence": "LOW", |
| 1284 | "cwe": [ |
| 1285 | "CWE-798: Use of Hard-coded Credentials" |
| 1286 | ], |
| 1287 | "cwe2021-top25": true, |
| 1288 | "cwe2022-top25": true, |
| 1289 | "impact": "MEDIUM", |
| 1290 | "likelihood": "LOW", |
| 1291 | "owasp": [ |
| 1292 | "A07:2021 - Identification and Authentication Failures" |
| 1293 | ], |
| 1294 | "references": [ |
| 1295 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1296 | ], |
| 1297 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1298 | "subcategory": [ |
| 1299 | "vuln" |
| 1300 | ], |
| 1301 | "technology": [ |
| 1302 | "gitleaks" |
| 1303 | ] |
| 1304 | }, |
| 1305 | "patterns": [ |
| 1306 | { |
| 1307 | "pattern-regex": "(?i)(?:asana)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1308 | } |
| 1309 | ], |
| 1310 | "severity": "INFO" |
| 1311 | }, |
| 1312 | { |
| 1313 | "id": "vendored-rules.generic.secrets.gitleaks.asana-client-secret", |
| 1314 | "languages": [ |
| 1315 | "regex" |
| 1316 | ], |
| 1317 | "message": "A gitleaks Asana Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1318 | "metadata": { |
| 1319 | "category": "security", |
| 1320 | "confidence": "LOW", |
| 1321 | "cwe": [ |
| 1322 | "CWE-798: Use of Hard-coded Credentials" |
| 1323 | ], |
| 1324 | "cwe2021-top25": true, |
| 1325 | "cwe2022-top25": true, |
| 1326 | "impact": "MEDIUM", |
| 1327 | "likelihood": "LOW", |
| 1328 | "owasp": [ |
| 1329 | "A07:2021 - Identification and Authentication Failures" |
| 1330 | ], |
| 1331 | "references": [ |
| 1332 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1333 | ], |
| 1334 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1335 | "subcategory": [ |
| 1336 | "vuln" |
| 1337 | ], |
| 1338 | "technology": [ |
| 1339 | "gitleaks" |
| 1340 | ] |
| 1341 | }, |
| 1342 | "patterns": [ |
| 1343 | { |
| 1344 | "pattern-regex": "(?i)(?:asana)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1345 | } |
| 1346 | ], |
| 1347 | "severity": "INFO" |
| 1348 | }, |
| 1349 | { |
| 1350 | "id": "vendored-rules.generic.secrets.gitleaks.atlassian-api-token", |
| 1351 | "languages": [ |
| 1352 | "regex" |
| 1353 | ], |
| 1354 | "message": "A gitleaks Atlassian API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1355 | "metadata": { |
| 1356 | "category": "security", |
| 1357 | "confidence": "LOW", |
| 1358 | "cwe": [ |
| 1359 | "CWE-798: Use of Hard-coded Credentials" |
| 1360 | ], |
| 1361 | "cwe2021-top25": true, |
| 1362 | "cwe2022-top25": true, |
| 1363 | "impact": "MEDIUM", |
| 1364 | "likelihood": "LOW", |
| 1365 | "owasp": [ |
| 1366 | "A07:2021 - Identification and Authentication Failures" |
| 1367 | ], |
| 1368 | "references": [ |
| 1369 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1370 | ], |
| 1371 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1372 | "subcategory": [ |
| 1373 | "vuln" |
| 1374 | ], |
| 1375 | "technology": [ |
| 1376 | "gitleaks" |
| 1377 | ] |
| 1378 | }, |
| 1379 | "patterns": [ |
| 1380 | { |
| 1381 | "pattern-regex": "(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1382 | } |
| 1383 | ], |
| 1384 | "severity": "INFO" |
| 1385 | }, |
| 1386 | { |
| 1387 | "id": "vendored-rules.generic.secrets.gitleaks.authress-service-client-access-key", |
| 1388 | "languages": [ |
| 1389 | "regex" |
| 1390 | ], |
| 1391 | "message": "A gitleaks Authress Service Client Access Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1392 | "metadata": { |
| 1393 | "category": "security", |
| 1394 | "confidence": "LOW", |
| 1395 | "cwe": [ |
| 1396 | "CWE-798: Use of Hard-coded Credentials" |
| 1397 | ], |
| 1398 | "cwe2021-top25": true, |
| 1399 | "cwe2022-top25": true, |
| 1400 | "impact": "MEDIUM", |
| 1401 | "likelihood": "LOW", |
| 1402 | "owasp": [ |
| 1403 | "A07:2021 - Identification and Authentication Failures" |
| 1404 | ], |
| 1405 | "references": [ |
| 1406 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1407 | ], |
| 1408 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1409 | "subcategory": [ |
| 1410 | "vuln" |
| 1411 | ], |
| 1412 | "technology": [ |
| 1413 | "gitleaks" |
| 1414 | ] |
| 1415 | }, |
| 1416 | "patterns": [ |
| 1417 | { |
| 1418 | "pattern-regex": "(?i)\\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\\.[a-z0-9]{4,6}\\.acc[_-][a-z0-9-]{10,32}\\.[a-z0-9+/_=-]{30,120})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1419 | } |
| 1420 | ], |
| 1421 | "severity": "INFO" |
| 1422 | }, |
| 1423 | { |
| 1424 | "id": "vendored-rules.generic.secrets.gitleaks.aws-access-token", |
| 1425 | "languages": [ |
| 1426 | "regex" |
| 1427 | ], |
| 1428 | "message": "A gitleaks AWS Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1429 | "metadata": { |
| 1430 | "category": "security", |
| 1431 | "confidence": "LOW", |
| 1432 | "cwe": [ |
| 1433 | "CWE-798: Use of Hard-coded Credentials" |
| 1434 | ], |
| 1435 | "cwe2021-top25": true, |
| 1436 | "cwe2022-top25": true, |
| 1437 | "impact": "MEDIUM", |
| 1438 | "likelihood": "LOW", |
| 1439 | "owasp": [ |
| 1440 | "A07:2021 - Identification and Authentication Failures" |
| 1441 | ], |
| 1442 | "references": [ |
| 1443 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1444 | ], |
| 1445 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1446 | "subcategory": [ |
| 1447 | "vuln" |
| 1448 | ], |
| 1449 | "technology": [ |
| 1450 | "gitleaks" |
| 1451 | ] |
| 1452 | }, |
| 1453 | "patterns": [ |
| 1454 | { |
| 1455 | "pattern-regex": "(?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}" |
| 1456 | } |
| 1457 | ], |
| 1458 | "severity": "INFO" |
| 1459 | }, |
| 1460 | { |
| 1461 | "id": "vendored-rules.generic.secrets.gitleaks.beamer-api-token", |
| 1462 | "languages": [ |
| 1463 | "regex" |
| 1464 | ], |
| 1465 | "message": "A gitleaks Beamer API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1466 | "metadata": { |
| 1467 | "category": "security", |
| 1468 | "confidence": "LOW", |
| 1469 | "cwe": [ |
| 1470 | "CWE-798: Use of Hard-coded Credentials" |
| 1471 | ], |
| 1472 | "cwe2021-top25": true, |
| 1473 | "cwe2022-top25": true, |
| 1474 | "impact": "MEDIUM", |
| 1475 | "likelihood": "LOW", |
| 1476 | "owasp": [ |
| 1477 | "A07:2021 - Identification and Authentication Failures" |
| 1478 | ], |
| 1479 | "references": [ |
| 1480 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1481 | ], |
| 1482 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1483 | "subcategory": [ |
| 1484 | "vuln" |
| 1485 | ], |
| 1486 | "technology": [ |
| 1487 | "gitleaks" |
| 1488 | ] |
| 1489 | }, |
| 1490 | "patterns": [ |
| 1491 | { |
| 1492 | "pattern-regex": "(?i)(?:beamer)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(b_[a-z0-9=_\\-]{44})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1493 | } |
| 1494 | ], |
| 1495 | "severity": "INFO" |
| 1496 | }, |
| 1497 | { |
| 1498 | "id": "vendored-rules.generic.secrets.gitleaks.bitbucket-client-id", |
| 1499 | "languages": [ |
| 1500 | "regex" |
| 1501 | ], |
| 1502 | "message": "A gitleaks Bitbucket Client ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1503 | "metadata": { |
| 1504 | "category": "security", |
| 1505 | "confidence": "LOW", |
| 1506 | "cwe": [ |
| 1507 | "CWE-798: Use of Hard-coded Credentials" |
| 1508 | ], |
| 1509 | "cwe2021-top25": true, |
| 1510 | "cwe2022-top25": true, |
| 1511 | "impact": "MEDIUM", |
| 1512 | "likelihood": "LOW", |
| 1513 | "owasp": [ |
| 1514 | "A07:2021 - Identification and Authentication Failures" |
| 1515 | ], |
| 1516 | "references": [ |
| 1517 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1518 | ], |
| 1519 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1520 | "subcategory": [ |
| 1521 | "vuln" |
| 1522 | ], |
| 1523 | "technology": [ |
| 1524 | "gitleaks" |
| 1525 | ] |
| 1526 | }, |
| 1527 | "patterns": [ |
| 1528 | { |
| 1529 | "pattern-regex": "(?i)(?:bitbucket)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1530 | } |
| 1531 | ], |
| 1532 | "severity": "INFO" |
| 1533 | }, |
| 1534 | { |
| 1535 | "id": "vendored-rules.generic.secrets.gitleaks.bitbucket-client-secret", |
| 1536 | "languages": [ |
| 1537 | "regex" |
| 1538 | ], |
| 1539 | "message": "A gitleaks Bitbucket Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1540 | "metadata": { |
| 1541 | "category": "security", |
| 1542 | "confidence": "LOW", |
| 1543 | "cwe": [ |
| 1544 | "CWE-798: Use of Hard-coded Credentials" |
| 1545 | ], |
| 1546 | "cwe2021-top25": true, |
| 1547 | "cwe2022-top25": true, |
| 1548 | "impact": "MEDIUM", |
| 1549 | "likelihood": "LOW", |
| 1550 | "owasp": [ |
| 1551 | "A07:2021 - Identification and Authentication Failures" |
| 1552 | ], |
| 1553 | "references": [ |
| 1554 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1555 | ], |
| 1556 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1557 | "subcategory": [ |
| 1558 | "vuln" |
| 1559 | ], |
| 1560 | "technology": [ |
| 1561 | "gitleaks" |
| 1562 | ] |
| 1563 | }, |
| 1564 | "patterns": [ |
| 1565 | { |
| 1566 | "pattern-regex": "(?i)(?:bitbucket)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1567 | } |
| 1568 | ], |
| 1569 | "severity": "INFO" |
| 1570 | }, |
| 1571 | { |
| 1572 | "id": "vendored-rules.generic.secrets.gitleaks.bittrex-access-key", |
| 1573 | "languages": [ |
| 1574 | "regex" |
| 1575 | ], |
| 1576 | "message": "A gitleaks Bittrex Access Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1577 | "metadata": { |
| 1578 | "category": "security", |
| 1579 | "confidence": "LOW", |
| 1580 | "cwe": [ |
| 1581 | "CWE-798: Use of Hard-coded Credentials" |
| 1582 | ], |
| 1583 | "cwe2021-top25": true, |
| 1584 | "cwe2022-top25": true, |
| 1585 | "impact": "MEDIUM", |
| 1586 | "likelihood": "LOW", |
| 1587 | "owasp": [ |
| 1588 | "A07:2021 - Identification and Authentication Failures" |
| 1589 | ], |
| 1590 | "references": [ |
| 1591 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1592 | ], |
| 1593 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1594 | "subcategory": [ |
| 1595 | "vuln" |
| 1596 | ], |
| 1597 | "technology": [ |
| 1598 | "gitleaks" |
| 1599 | ] |
| 1600 | }, |
| 1601 | "patterns": [ |
| 1602 | { |
| 1603 | "pattern-regex": "(?i)(?:bittrex)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1604 | } |
| 1605 | ], |
| 1606 | "severity": "INFO" |
| 1607 | }, |
| 1608 | { |
| 1609 | "id": "vendored-rules.generic.secrets.gitleaks.bittrex-secret-key", |
| 1610 | "languages": [ |
| 1611 | "regex" |
| 1612 | ], |
| 1613 | "message": "A gitleaks Bittrex Secret Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1614 | "metadata": { |
| 1615 | "category": "security", |
| 1616 | "confidence": "LOW", |
| 1617 | "cwe": [ |
| 1618 | "CWE-798: Use of Hard-coded Credentials" |
| 1619 | ], |
| 1620 | "cwe2021-top25": true, |
| 1621 | "cwe2022-top25": true, |
| 1622 | "impact": "MEDIUM", |
| 1623 | "likelihood": "LOW", |
| 1624 | "owasp": [ |
| 1625 | "A07:2021 - Identification and Authentication Failures" |
| 1626 | ], |
| 1627 | "references": [ |
| 1628 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1629 | ], |
| 1630 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1631 | "subcategory": [ |
| 1632 | "vuln" |
| 1633 | ], |
| 1634 | "technology": [ |
| 1635 | "gitleaks" |
| 1636 | ] |
| 1637 | }, |
| 1638 | "patterns": [ |
| 1639 | { |
| 1640 | "pattern-regex": "(?i)(?:bittrex)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1641 | } |
| 1642 | ], |
| 1643 | "severity": "INFO" |
| 1644 | }, |
| 1645 | { |
| 1646 | "id": "vendored-rules.generic.secrets.gitleaks.clojars-api-token", |
| 1647 | "languages": [ |
| 1648 | "regex" |
| 1649 | ], |
| 1650 | "message": "A gitleaks Clojars API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1651 | "metadata": { |
| 1652 | "category": "security", |
| 1653 | "confidence": "LOW", |
| 1654 | "cwe": [ |
| 1655 | "CWE-798: Use of Hard-coded Credentials" |
| 1656 | ], |
| 1657 | "cwe2021-top25": true, |
| 1658 | "cwe2022-top25": true, |
| 1659 | "impact": "MEDIUM", |
| 1660 | "likelihood": "LOW", |
| 1661 | "owasp": [ |
| 1662 | "A07:2021 - Identification and Authentication Failures" |
| 1663 | ], |
| 1664 | "references": [ |
| 1665 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1666 | ], |
| 1667 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1668 | "subcategory": [ |
| 1669 | "vuln" |
| 1670 | ], |
| 1671 | "technology": [ |
| 1672 | "gitleaks" |
| 1673 | ] |
| 1674 | }, |
| 1675 | "patterns": [ |
| 1676 | { |
| 1677 | "pattern-regex": "(?i)(CLOJARS_)[a-z0-9]{60}" |
| 1678 | } |
| 1679 | ], |
| 1680 | "severity": "INFO" |
| 1681 | }, |
| 1682 | { |
| 1683 | "id": "vendored-rules.generic.secrets.gitleaks.cloudflare-api-key", |
| 1684 | "languages": [ |
| 1685 | "regex" |
| 1686 | ], |
| 1687 | "message": "A gitleaks Cloudflare API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1688 | "metadata": { |
| 1689 | "category": "security", |
| 1690 | "confidence": "LOW", |
| 1691 | "cwe": [ |
| 1692 | "CWE-798: Use of Hard-coded Credentials" |
| 1693 | ], |
| 1694 | "cwe2021-top25": true, |
| 1695 | "cwe2022-top25": true, |
| 1696 | "impact": "MEDIUM", |
| 1697 | "likelihood": "LOW", |
| 1698 | "owasp": [ |
| 1699 | "A07:2021 - Identification and Authentication Failures" |
| 1700 | ], |
| 1701 | "references": [ |
| 1702 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1703 | ], |
| 1704 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1705 | "subcategory": [ |
| 1706 | "vuln" |
| 1707 | ], |
| 1708 | "technology": [ |
| 1709 | "gitleaks" |
| 1710 | ] |
| 1711 | }, |
| 1712 | "patterns": [ |
| 1713 | { |
| 1714 | "pattern-regex": "(?i)(?:cloudflare)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1715 | } |
| 1716 | ], |
| 1717 | "severity": "INFO" |
| 1718 | }, |
| 1719 | { |
| 1720 | "id": "vendored-rules.generic.secrets.gitleaks.cloudflare-global-api-key", |
| 1721 | "languages": [ |
| 1722 | "regex" |
| 1723 | ], |
| 1724 | "message": "A gitleaks Cloudflare Global API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1725 | "metadata": { |
| 1726 | "category": "security", |
| 1727 | "confidence": "LOW", |
| 1728 | "cwe": [ |
| 1729 | "CWE-798: Use of Hard-coded Credentials" |
| 1730 | ], |
| 1731 | "cwe2021-top25": true, |
| 1732 | "cwe2022-top25": true, |
| 1733 | "impact": "MEDIUM", |
| 1734 | "likelihood": "LOW", |
| 1735 | "owasp": [ |
| 1736 | "A07:2021 - Identification and Authentication Failures" |
| 1737 | ], |
| 1738 | "references": [ |
| 1739 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1740 | ], |
| 1741 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1742 | "subcategory": [ |
| 1743 | "vuln" |
| 1744 | ], |
| 1745 | "technology": [ |
| 1746 | "gitleaks" |
| 1747 | ] |
| 1748 | }, |
| 1749 | "patterns": [ |
| 1750 | { |
| 1751 | "pattern-regex": "(?i)(?:cloudflare)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{37})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1752 | } |
| 1753 | ], |
| 1754 | "severity": "INFO" |
| 1755 | }, |
| 1756 | { |
| 1757 | "id": "vendored-rules.generic.secrets.gitleaks.cloudflare-origin-ca-key", |
| 1758 | "languages": [ |
| 1759 | "regex" |
| 1760 | ], |
| 1761 | "message": "A gitleaks Cloudflare Origin Ca Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1762 | "metadata": { |
| 1763 | "category": "security", |
| 1764 | "confidence": "LOW", |
| 1765 | "cwe": [ |
| 1766 | "CWE-798: Use of Hard-coded Credentials" |
| 1767 | ], |
| 1768 | "cwe2021-top25": true, |
| 1769 | "cwe2022-top25": true, |
| 1770 | "impact": "MEDIUM", |
| 1771 | "likelihood": "LOW", |
| 1772 | "owasp": [ |
| 1773 | "A07:2021 - Identification and Authentication Failures" |
| 1774 | ], |
| 1775 | "references": [ |
| 1776 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1777 | ], |
| 1778 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1779 | "subcategory": [ |
| 1780 | "vuln" |
| 1781 | ], |
| 1782 | "technology": [ |
| 1783 | "gitleaks" |
| 1784 | ] |
| 1785 | }, |
| 1786 | "patterns": [ |
| 1787 | { |
| 1788 | "pattern-regex": "\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1789 | } |
| 1790 | ], |
| 1791 | "severity": "INFO" |
| 1792 | }, |
| 1793 | { |
| 1794 | "id": "vendored-rules.generic.secrets.gitleaks.codecov-access-token", |
| 1795 | "languages": [ |
| 1796 | "regex" |
| 1797 | ], |
| 1798 | "message": "A gitleaks Codecov Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1799 | "metadata": { |
| 1800 | "category": "security", |
| 1801 | "confidence": "LOW", |
| 1802 | "cwe": [ |
| 1803 | "CWE-798: Use of Hard-coded Credentials" |
| 1804 | ], |
| 1805 | "cwe2021-top25": true, |
| 1806 | "cwe2022-top25": true, |
| 1807 | "impact": "MEDIUM", |
| 1808 | "likelihood": "LOW", |
| 1809 | "owasp": [ |
| 1810 | "A07:2021 - Identification and Authentication Failures" |
| 1811 | ], |
| 1812 | "references": [ |
| 1813 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1814 | ], |
| 1815 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1816 | "subcategory": [ |
| 1817 | "vuln" |
| 1818 | ], |
| 1819 | "technology": [ |
| 1820 | "gitleaks" |
| 1821 | ] |
| 1822 | }, |
| 1823 | "patterns": [ |
| 1824 | { |
| 1825 | "pattern-regex": "(?i)(?:codecov)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1826 | } |
| 1827 | ], |
| 1828 | "severity": "INFO" |
| 1829 | }, |
| 1830 | { |
| 1831 | "id": "vendored-rules.generic.secrets.gitleaks.coinbase-access-token", |
| 1832 | "languages": [ |
| 1833 | "regex" |
| 1834 | ], |
| 1835 | "message": "A gitleaks Coinbase Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1836 | "metadata": { |
| 1837 | "category": "security", |
| 1838 | "confidence": "LOW", |
| 1839 | "cwe": [ |
| 1840 | "CWE-798: Use of Hard-coded Credentials" |
| 1841 | ], |
| 1842 | "cwe2021-top25": true, |
| 1843 | "cwe2022-top25": true, |
| 1844 | "impact": "MEDIUM", |
| 1845 | "likelihood": "LOW", |
| 1846 | "owasp": [ |
| 1847 | "A07:2021 - Identification and Authentication Failures" |
| 1848 | ], |
| 1849 | "references": [ |
| 1850 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1851 | ], |
| 1852 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1853 | "subcategory": [ |
| 1854 | "vuln" |
| 1855 | ], |
| 1856 | "technology": [ |
| 1857 | "gitleaks" |
| 1858 | ] |
| 1859 | }, |
| 1860 | "patterns": [ |
| 1861 | { |
| 1862 | "pattern-regex": "(?i)(?:coinbase)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1863 | } |
| 1864 | ], |
| 1865 | "severity": "INFO" |
| 1866 | }, |
| 1867 | { |
| 1868 | "id": "vendored-rules.generic.secrets.gitleaks.confluent-access-token", |
| 1869 | "languages": [ |
| 1870 | "regex" |
| 1871 | ], |
| 1872 | "message": "A gitleaks Confluent Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1873 | "metadata": { |
| 1874 | "category": "security", |
| 1875 | "confidence": "LOW", |
| 1876 | "cwe": [ |
| 1877 | "CWE-798: Use of Hard-coded Credentials" |
| 1878 | ], |
| 1879 | "cwe2021-top25": true, |
| 1880 | "cwe2022-top25": true, |
| 1881 | "impact": "MEDIUM", |
| 1882 | "likelihood": "LOW", |
| 1883 | "owasp": [ |
| 1884 | "A07:2021 - Identification and Authentication Failures" |
| 1885 | ], |
| 1886 | "references": [ |
| 1887 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1888 | ], |
| 1889 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1890 | "subcategory": [ |
| 1891 | "vuln" |
| 1892 | ], |
| 1893 | "technology": [ |
| 1894 | "gitleaks" |
| 1895 | ] |
| 1896 | }, |
| 1897 | "patterns": [ |
| 1898 | { |
| 1899 | "pattern-regex": "(?i)(?:confluent)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1900 | } |
| 1901 | ], |
| 1902 | "severity": "INFO" |
| 1903 | }, |
| 1904 | { |
| 1905 | "id": "vendored-rules.generic.secrets.gitleaks.confluent-secret-key", |
| 1906 | "languages": [ |
| 1907 | "regex" |
| 1908 | ], |
| 1909 | "message": "A gitleaks Confluent Secret Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1910 | "metadata": { |
| 1911 | "category": "security", |
| 1912 | "confidence": "LOW", |
| 1913 | "cwe": [ |
| 1914 | "CWE-798: Use of Hard-coded Credentials" |
| 1915 | ], |
| 1916 | "cwe2021-top25": true, |
| 1917 | "cwe2022-top25": true, |
| 1918 | "impact": "MEDIUM", |
| 1919 | "likelihood": "LOW", |
| 1920 | "owasp": [ |
| 1921 | "A07:2021 - Identification and Authentication Failures" |
| 1922 | ], |
| 1923 | "references": [ |
| 1924 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1925 | ], |
| 1926 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1927 | "subcategory": [ |
| 1928 | "vuln" |
| 1929 | ], |
| 1930 | "technology": [ |
| 1931 | "gitleaks" |
| 1932 | ] |
| 1933 | }, |
| 1934 | "patterns": [ |
| 1935 | { |
| 1936 | "pattern-regex": "(?i)(?:confluent)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1937 | } |
| 1938 | ], |
| 1939 | "severity": "INFO" |
| 1940 | }, |
| 1941 | { |
| 1942 | "id": "vendored-rules.generic.secrets.gitleaks.contentful-delivery-api-token", |
| 1943 | "languages": [ |
| 1944 | "regex" |
| 1945 | ], |
| 1946 | "message": "A gitleaks Contentful Delivery API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1947 | "metadata": { |
| 1948 | "category": "security", |
| 1949 | "confidence": "LOW", |
| 1950 | "cwe": [ |
| 1951 | "CWE-798: Use of Hard-coded Credentials" |
| 1952 | ], |
| 1953 | "cwe2021-top25": true, |
| 1954 | "cwe2022-top25": true, |
| 1955 | "impact": "MEDIUM", |
| 1956 | "likelihood": "LOW", |
| 1957 | "owasp": [ |
| 1958 | "A07:2021 - Identification and Authentication Failures" |
| 1959 | ], |
| 1960 | "references": [ |
| 1961 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1962 | ], |
| 1963 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 1964 | "subcategory": [ |
| 1965 | "vuln" |
| 1966 | ], |
| 1967 | "technology": [ |
| 1968 | "gitleaks" |
| 1969 | ] |
| 1970 | }, |
| 1971 | "patterns": [ |
| 1972 | { |
| 1973 | "pattern-regex": "(?i)(?:contentful)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{43})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 1974 | } |
| 1975 | ], |
| 1976 | "severity": "INFO" |
| 1977 | }, |
| 1978 | { |
| 1979 | "id": "vendored-rules.generic.secrets.gitleaks.databricks-api-token", |
| 1980 | "languages": [ |
| 1981 | "regex" |
| 1982 | ], |
| 1983 | "message": "A gitleaks Databricks API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 1984 | "metadata": { |
| 1985 | "category": "security", |
| 1986 | "confidence": "LOW", |
| 1987 | "cwe": [ |
| 1988 | "CWE-798: Use of Hard-coded Credentials" |
| 1989 | ], |
| 1990 | "cwe2021-top25": true, |
| 1991 | "cwe2022-top25": true, |
| 1992 | "impact": "MEDIUM", |
| 1993 | "likelihood": "LOW", |
| 1994 | "owasp": [ |
| 1995 | "A07:2021 - Identification and Authentication Failures" |
| 1996 | ], |
| 1997 | "references": [ |
| 1998 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 1999 | ], |
| 2000 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2001 | "subcategory": [ |
| 2002 | "vuln" |
| 2003 | ], |
| 2004 | "technology": [ |
| 2005 | "gitleaks" |
| 2006 | ] |
| 2007 | }, |
| 2008 | "patterns": [ |
| 2009 | { |
| 2010 | "pattern-regex": "(?i)\\b(dapi[a-h0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2011 | } |
| 2012 | ], |
| 2013 | "severity": "INFO" |
| 2014 | }, |
| 2015 | { |
| 2016 | "id": "vendored-rules.generic.secrets.gitleaks.datadog-access-token", |
| 2017 | "languages": [ |
| 2018 | "regex" |
| 2019 | ], |
| 2020 | "message": "A gitleaks Datadog Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2021 | "metadata": { |
| 2022 | "category": "security", |
| 2023 | "confidence": "LOW", |
| 2024 | "cwe": [ |
| 2025 | "CWE-798: Use of Hard-coded Credentials" |
| 2026 | ], |
| 2027 | "cwe2021-top25": true, |
| 2028 | "cwe2022-top25": true, |
| 2029 | "impact": "MEDIUM", |
| 2030 | "likelihood": "LOW", |
| 2031 | "owasp": [ |
| 2032 | "A07:2021 - Identification and Authentication Failures" |
| 2033 | ], |
| 2034 | "references": [ |
| 2035 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2036 | ], |
| 2037 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2038 | "subcategory": [ |
| 2039 | "vuln" |
| 2040 | ], |
| 2041 | "technology": [ |
| 2042 | "gitleaks" |
| 2043 | ] |
| 2044 | }, |
| 2045 | "patterns": [ |
| 2046 | { |
| 2047 | "pattern-regex": "(?i)(?:datadog)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2048 | } |
| 2049 | ], |
| 2050 | "severity": "INFO" |
| 2051 | }, |
| 2052 | { |
| 2053 | "id": "vendored-rules.generic.secrets.gitleaks.defined-networking-api-token", |
| 2054 | "languages": [ |
| 2055 | "regex" |
| 2056 | ], |
| 2057 | "message": "A gitleaks Defined Networking API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2058 | "metadata": { |
| 2059 | "category": "security", |
| 2060 | "confidence": "LOW", |
| 2061 | "cwe": [ |
| 2062 | "CWE-798: Use of Hard-coded Credentials" |
| 2063 | ], |
| 2064 | "cwe2021-top25": true, |
| 2065 | "cwe2022-top25": true, |
| 2066 | "impact": "MEDIUM", |
| 2067 | "likelihood": "LOW", |
| 2068 | "owasp": [ |
| 2069 | "A07:2021 - Identification and Authentication Failures" |
| 2070 | ], |
| 2071 | "references": [ |
| 2072 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2073 | ], |
| 2074 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2075 | "subcategory": [ |
| 2076 | "vuln" |
| 2077 | ], |
| 2078 | "technology": [ |
| 2079 | "gitleaks" |
| 2080 | ] |
| 2081 | }, |
| 2082 | "patterns": [ |
| 2083 | { |
| 2084 | "pattern-regex": "(?i)(?:dnkey)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2085 | } |
| 2086 | ], |
| 2087 | "severity": "INFO" |
| 2088 | }, |
| 2089 | { |
| 2090 | "id": "vendored-rules.generic.secrets.gitleaks.digitalocean-access-token", |
| 2091 | "languages": [ |
| 2092 | "regex" |
| 2093 | ], |
| 2094 | "message": "A gitleaks Digitalocean Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2095 | "metadata": { |
| 2096 | "category": "security", |
| 2097 | "confidence": "LOW", |
| 2098 | "cwe": [ |
| 2099 | "CWE-798: Use of Hard-coded Credentials" |
| 2100 | ], |
| 2101 | "cwe2021-top25": true, |
| 2102 | "cwe2022-top25": true, |
| 2103 | "impact": "MEDIUM", |
| 2104 | "likelihood": "LOW", |
| 2105 | "owasp": [ |
| 2106 | "A07:2021 - Identification and Authentication Failures" |
| 2107 | ], |
| 2108 | "references": [ |
| 2109 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2110 | ], |
| 2111 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2112 | "subcategory": [ |
| 2113 | "vuln" |
| 2114 | ], |
| 2115 | "technology": [ |
| 2116 | "gitleaks" |
| 2117 | ] |
| 2118 | }, |
| 2119 | "patterns": [ |
| 2120 | { |
| 2121 | "pattern-regex": "(?i)\\b(doo_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2122 | } |
| 2123 | ], |
| 2124 | "severity": "INFO" |
| 2125 | }, |
| 2126 | { |
| 2127 | "id": "vendored-rules.generic.secrets.gitleaks.digitalocean-pat", |
| 2128 | "languages": [ |
| 2129 | "regex" |
| 2130 | ], |
| 2131 | "message": "A gitleaks Digitalocean Pat credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2132 | "metadata": { |
| 2133 | "category": "security", |
| 2134 | "confidence": "LOW", |
| 2135 | "cwe": [ |
| 2136 | "CWE-798: Use of Hard-coded Credentials" |
| 2137 | ], |
| 2138 | "cwe2021-top25": true, |
| 2139 | "cwe2022-top25": true, |
| 2140 | "impact": "MEDIUM", |
| 2141 | "likelihood": "LOW", |
| 2142 | "owasp": [ |
| 2143 | "A07:2021 - Identification and Authentication Failures" |
| 2144 | ], |
| 2145 | "references": [ |
| 2146 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2147 | ], |
| 2148 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2149 | "subcategory": [ |
| 2150 | "vuln" |
| 2151 | ], |
| 2152 | "technology": [ |
| 2153 | "gitleaks" |
| 2154 | ] |
| 2155 | }, |
| 2156 | "patterns": [ |
| 2157 | { |
| 2158 | "pattern-regex": "(?i)\\b(dop_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2159 | } |
| 2160 | ], |
| 2161 | "severity": "INFO" |
| 2162 | }, |
| 2163 | { |
| 2164 | "id": "vendored-rules.generic.secrets.gitleaks.digitalocean-refresh-token", |
| 2165 | "languages": [ |
| 2166 | "regex" |
| 2167 | ], |
| 2168 | "message": "A gitleaks Digitalocean Refresh Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2169 | "metadata": { |
| 2170 | "category": "security", |
| 2171 | "confidence": "LOW", |
| 2172 | "cwe": [ |
| 2173 | "CWE-798: Use of Hard-coded Credentials" |
| 2174 | ], |
| 2175 | "cwe2021-top25": true, |
| 2176 | "cwe2022-top25": true, |
| 2177 | "impact": "MEDIUM", |
| 2178 | "likelihood": "LOW", |
| 2179 | "owasp": [ |
| 2180 | "A07:2021 - Identification and Authentication Failures" |
| 2181 | ], |
| 2182 | "references": [ |
| 2183 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2184 | ], |
| 2185 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2186 | "subcategory": [ |
| 2187 | "vuln" |
| 2188 | ], |
| 2189 | "technology": [ |
| 2190 | "gitleaks" |
| 2191 | ] |
| 2192 | }, |
| 2193 | "patterns": [ |
| 2194 | { |
| 2195 | "pattern-regex": "(?i)\\b(dor_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2196 | } |
| 2197 | ], |
| 2198 | "severity": "INFO" |
| 2199 | }, |
| 2200 | { |
| 2201 | "id": "vendored-rules.generic.secrets.gitleaks.discord-api-token", |
| 2202 | "languages": [ |
| 2203 | "regex" |
| 2204 | ], |
| 2205 | "message": "A gitleaks Discord API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2206 | "metadata": { |
| 2207 | "category": "security", |
| 2208 | "confidence": "LOW", |
| 2209 | "cwe": [ |
| 2210 | "CWE-798: Use of Hard-coded Credentials" |
| 2211 | ], |
| 2212 | "cwe2021-top25": true, |
| 2213 | "cwe2022-top25": true, |
| 2214 | "impact": "MEDIUM", |
| 2215 | "likelihood": "LOW", |
| 2216 | "owasp": [ |
| 2217 | "A07:2021 - Identification and Authentication Failures" |
| 2218 | ], |
| 2219 | "references": [ |
| 2220 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2221 | ], |
| 2222 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2223 | "subcategory": [ |
| 2224 | "vuln" |
| 2225 | ], |
| 2226 | "technology": [ |
| 2227 | "gitleaks" |
| 2228 | ] |
| 2229 | }, |
| 2230 | "patterns": [ |
| 2231 | { |
| 2232 | "pattern-regex": "(?i)(?:discord)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2233 | } |
| 2234 | ], |
| 2235 | "severity": "INFO" |
| 2236 | }, |
| 2237 | { |
| 2238 | "id": "vendored-rules.generic.secrets.gitleaks.discord-client-id", |
| 2239 | "languages": [ |
| 2240 | "regex" |
| 2241 | ], |
| 2242 | "message": "A gitleaks Discord Client ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2243 | "metadata": { |
| 2244 | "category": "security", |
| 2245 | "confidence": "LOW", |
| 2246 | "cwe": [ |
| 2247 | "CWE-798: Use of Hard-coded Credentials" |
| 2248 | ], |
| 2249 | "cwe2021-top25": true, |
| 2250 | "cwe2022-top25": true, |
| 2251 | "impact": "MEDIUM", |
| 2252 | "likelihood": "LOW", |
| 2253 | "owasp": [ |
| 2254 | "A07:2021 - Identification and Authentication Failures" |
| 2255 | ], |
| 2256 | "references": [ |
| 2257 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2258 | ], |
| 2259 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2260 | "subcategory": [ |
| 2261 | "vuln" |
| 2262 | ], |
| 2263 | "technology": [ |
| 2264 | "gitleaks" |
| 2265 | ] |
| 2266 | }, |
| 2267 | "patterns": [ |
| 2268 | { |
| 2269 | "pattern-regex": "(?i)(?:discord)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{18})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2270 | } |
| 2271 | ], |
| 2272 | "severity": "INFO" |
| 2273 | }, |
| 2274 | { |
| 2275 | "id": "vendored-rules.generic.secrets.gitleaks.discord-client-secret", |
| 2276 | "languages": [ |
| 2277 | "regex" |
| 2278 | ], |
| 2279 | "message": "A gitleaks Discord Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2280 | "metadata": { |
| 2281 | "category": "security", |
| 2282 | "confidence": "LOW", |
| 2283 | "cwe": [ |
| 2284 | "CWE-798: Use of Hard-coded Credentials" |
| 2285 | ], |
| 2286 | "cwe2021-top25": true, |
| 2287 | "cwe2022-top25": true, |
| 2288 | "impact": "MEDIUM", |
| 2289 | "likelihood": "LOW", |
| 2290 | "owasp": [ |
| 2291 | "A07:2021 - Identification and Authentication Failures" |
| 2292 | ], |
| 2293 | "references": [ |
| 2294 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2295 | ], |
| 2296 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2297 | "subcategory": [ |
| 2298 | "vuln" |
| 2299 | ], |
| 2300 | "technology": [ |
| 2301 | "gitleaks" |
| 2302 | ] |
| 2303 | }, |
| 2304 | "patterns": [ |
| 2305 | { |
| 2306 | "pattern-regex": "(?i)(?:discord)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2307 | } |
| 2308 | ], |
| 2309 | "severity": "INFO" |
| 2310 | }, |
| 2311 | { |
| 2312 | "id": "vendored-rules.generic.secrets.gitleaks.doppler-api-token", |
| 2313 | "languages": [ |
| 2314 | "regex" |
| 2315 | ], |
| 2316 | "message": "A gitleaks Doppler API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2317 | "metadata": { |
| 2318 | "category": "security", |
| 2319 | "confidence": "LOW", |
| 2320 | "cwe": [ |
| 2321 | "CWE-798: Use of Hard-coded Credentials" |
| 2322 | ], |
| 2323 | "cwe2021-top25": true, |
| 2324 | "cwe2022-top25": true, |
| 2325 | "impact": "MEDIUM", |
| 2326 | "likelihood": "LOW", |
| 2327 | "owasp": [ |
| 2328 | "A07:2021 - Identification and Authentication Failures" |
| 2329 | ], |
| 2330 | "references": [ |
| 2331 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2332 | ], |
| 2333 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2334 | "subcategory": [ |
| 2335 | "vuln" |
| 2336 | ], |
| 2337 | "technology": [ |
| 2338 | "gitleaks" |
| 2339 | ] |
| 2340 | }, |
| 2341 | "patterns": [ |
| 2342 | { |
| 2343 | "pattern-regex": "(dp\\.pt\\.)(?i)[a-z0-9]{43}" |
| 2344 | } |
| 2345 | ], |
| 2346 | "severity": "INFO" |
| 2347 | }, |
| 2348 | { |
| 2349 | "id": "vendored-rules.generic.secrets.gitleaks.droneci-access-token", |
| 2350 | "languages": [ |
| 2351 | "regex" |
| 2352 | ], |
| 2353 | "message": "A gitleaks Droneci Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2354 | "metadata": { |
| 2355 | "category": "security", |
| 2356 | "confidence": "LOW", |
| 2357 | "cwe": [ |
| 2358 | "CWE-798: Use of Hard-coded Credentials" |
| 2359 | ], |
| 2360 | "cwe2021-top25": true, |
| 2361 | "cwe2022-top25": true, |
| 2362 | "impact": "MEDIUM", |
| 2363 | "likelihood": "LOW", |
| 2364 | "owasp": [ |
| 2365 | "A07:2021 - Identification and Authentication Failures" |
| 2366 | ], |
| 2367 | "references": [ |
| 2368 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2369 | ], |
| 2370 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2371 | "subcategory": [ |
| 2372 | "vuln" |
| 2373 | ], |
| 2374 | "technology": [ |
| 2375 | "gitleaks" |
| 2376 | ] |
| 2377 | }, |
| 2378 | "patterns": [ |
| 2379 | { |
| 2380 | "pattern-regex": "(?i)(?:droneci)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2381 | } |
| 2382 | ], |
| 2383 | "severity": "INFO" |
| 2384 | }, |
| 2385 | { |
| 2386 | "id": "vendored-rules.generic.secrets.gitleaks.dropbox-api-token", |
| 2387 | "languages": [ |
| 2388 | "regex" |
| 2389 | ], |
| 2390 | "message": "A gitleaks Dropbox API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2391 | "metadata": { |
| 2392 | "category": "security", |
| 2393 | "confidence": "LOW", |
| 2394 | "cwe": [ |
| 2395 | "CWE-798: Use of Hard-coded Credentials" |
| 2396 | ], |
| 2397 | "cwe2021-top25": true, |
| 2398 | "cwe2022-top25": true, |
| 2399 | "impact": "MEDIUM", |
| 2400 | "likelihood": "LOW", |
| 2401 | "owasp": [ |
| 2402 | "A07:2021 - Identification and Authentication Failures" |
| 2403 | ], |
| 2404 | "references": [ |
| 2405 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2406 | ], |
| 2407 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2408 | "subcategory": [ |
| 2409 | "vuln" |
| 2410 | ], |
| 2411 | "technology": [ |
| 2412 | "gitleaks" |
| 2413 | ] |
| 2414 | }, |
| 2415 | "patterns": [ |
| 2416 | { |
| 2417 | "pattern-regex": "(?i)(?:dropbox)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{15})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2418 | } |
| 2419 | ], |
| 2420 | "severity": "INFO" |
| 2421 | }, |
| 2422 | { |
| 2423 | "id": "vendored-rules.generic.secrets.gitleaks.dropbox-long-lived-api-token", |
| 2424 | "languages": [ |
| 2425 | "regex" |
| 2426 | ], |
| 2427 | "message": "A gitleaks Dropbox Long Lived API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2428 | "metadata": { |
| 2429 | "category": "security", |
| 2430 | "confidence": "LOW", |
| 2431 | "cwe": [ |
| 2432 | "CWE-798: Use of Hard-coded Credentials" |
| 2433 | ], |
| 2434 | "cwe2021-top25": true, |
| 2435 | "cwe2022-top25": true, |
| 2436 | "impact": "MEDIUM", |
| 2437 | "likelihood": "LOW", |
| 2438 | "owasp": [ |
| 2439 | "A07:2021 - Identification and Authentication Failures" |
| 2440 | ], |
| 2441 | "references": [ |
| 2442 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2443 | ], |
| 2444 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2445 | "subcategory": [ |
| 2446 | "vuln" |
| 2447 | ], |
| 2448 | "technology": [ |
| 2449 | "gitleaks" |
| 2450 | ] |
| 2451 | }, |
| 2452 | "patterns": [ |
| 2453 | { |
| 2454 | "pattern-regex": "(?i)(?:dropbox)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2455 | } |
| 2456 | ], |
| 2457 | "severity": "INFO" |
| 2458 | }, |
| 2459 | { |
| 2460 | "id": "vendored-rules.generic.secrets.gitleaks.dropbox-short-lived-api-token", |
| 2461 | "languages": [ |
| 2462 | "regex" |
| 2463 | ], |
| 2464 | "message": "A gitleaks Dropbox Short Lived API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2465 | "metadata": { |
| 2466 | "category": "security", |
| 2467 | "confidence": "LOW", |
| 2468 | "cwe": [ |
| 2469 | "CWE-798: Use of Hard-coded Credentials" |
| 2470 | ], |
| 2471 | "cwe2021-top25": true, |
| 2472 | "cwe2022-top25": true, |
| 2473 | "impact": "MEDIUM", |
| 2474 | "likelihood": "LOW", |
| 2475 | "owasp": [ |
| 2476 | "A07:2021 - Identification and Authentication Failures" |
| 2477 | ], |
| 2478 | "references": [ |
| 2479 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2480 | ], |
| 2481 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2482 | "subcategory": [ |
| 2483 | "vuln" |
| 2484 | ], |
| 2485 | "technology": [ |
| 2486 | "gitleaks" |
| 2487 | ] |
| 2488 | }, |
| 2489 | "patterns": [ |
| 2490 | { |
| 2491 | "pattern-regex": "(?i)(?:dropbox)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(sl\\.[a-z0-9\\-=_]{135})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2492 | } |
| 2493 | ], |
| 2494 | "severity": "INFO" |
| 2495 | }, |
| 2496 | { |
| 2497 | "id": "vendored-rules.generic.secrets.gitleaks.duffel-api-token", |
| 2498 | "languages": [ |
| 2499 | "regex" |
| 2500 | ], |
| 2501 | "message": "A gitleaks Duffel API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2502 | "metadata": { |
| 2503 | "category": "security", |
| 2504 | "confidence": "LOW", |
| 2505 | "cwe": [ |
| 2506 | "CWE-798: Use of Hard-coded Credentials" |
| 2507 | ], |
| 2508 | "cwe2021-top25": true, |
| 2509 | "cwe2022-top25": true, |
| 2510 | "impact": "MEDIUM", |
| 2511 | "likelihood": "LOW", |
| 2512 | "owasp": [ |
| 2513 | "A07:2021 - Identification and Authentication Failures" |
| 2514 | ], |
| 2515 | "references": [ |
| 2516 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2517 | ], |
| 2518 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2519 | "subcategory": [ |
| 2520 | "vuln" |
| 2521 | ], |
| 2522 | "technology": [ |
| 2523 | "gitleaks" |
| 2524 | ] |
| 2525 | }, |
| 2526 | "patterns": [ |
| 2527 | { |
| 2528 | "pattern-regex": "duffel_(test|live)_(?i)[a-z0-9_\\-=]{43}" |
| 2529 | } |
| 2530 | ], |
| 2531 | "severity": "INFO" |
| 2532 | }, |
| 2533 | { |
| 2534 | "id": "vendored-rules.generic.secrets.gitleaks.dynatrace-api-token", |
| 2535 | "languages": [ |
| 2536 | "regex" |
| 2537 | ], |
| 2538 | "message": "A gitleaks Dynatrace API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2539 | "metadata": { |
| 2540 | "category": "security", |
| 2541 | "confidence": "LOW", |
| 2542 | "cwe": [ |
| 2543 | "CWE-798: Use of Hard-coded Credentials" |
| 2544 | ], |
| 2545 | "cwe2021-top25": true, |
| 2546 | "cwe2022-top25": true, |
| 2547 | "impact": "MEDIUM", |
| 2548 | "likelihood": "LOW", |
| 2549 | "owasp": [ |
| 2550 | "A07:2021 - Identification and Authentication Failures" |
| 2551 | ], |
| 2552 | "references": [ |
| 2553 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2554 | ], |
| 2555 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2556 | "subcategory": [ |
| 2557 | "vuln" |
| 2558 | ], |
| 2559 | "technology": [ |
| 2560 | "gitleaks" |
| 2561 | ] |
| 2562 | }, |
| 2563 | "patterns": [ |
| 2564 | { |
| 2565 | "pattern-regex": "dt0c01\\.(?i)[a-z0-9]{24}\\.[a-z0-9]{64}" |
| 2566 | } |
| 2567 | ], |
| 2568 | "severity": "INFO" |
| 2569 | }, |
| 2570 | { |
| 2571 | "id": "vendored-rules.generic.secrets.gitleaks.easypost-api-token", |
| 2572 | "languages": [ |
| 2573 | "regex" |
| 2574 | ], |
| 2575 | "message": "A gitleaks Easypost API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2576 | "metadata": { |
| 2577 | "category": "security", |
| 2578 | "confidence": "LOW", |
| 2579 | "cwe": [ |
| 2580 | "CWE-798: Use of Hard-coded Credentials" |
| 2581 | ], |
| 2582 | "cwe2021-top25": true, |
| 2583 | "cwe2022-top25": true, |
| 2584 | "impact": "MEDIUM", |
| 2585 | "likelihood": "LOW", |
| 2586 | "owasp": [ |
| 2587 | "A07:2021 - Identification and Authentication Failures" |
| 2588 | ], |
| 2589 | "references": [ |
| 2590 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2591 | ], |
| 2592 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2593 | "subcategory": [ |
| 2594 | "vuln" |
| 2595 | ], |
| 2596 | "technology": [ |
| 2597 | "gitleaks" |
| 2598 | ] |
| 2599 | }, |
| 2600 | "patterns": [ |
| 2601 | { |
| 2602 | "pattern-regex": "\\bEZAK(?i)[a-z0-9]{54}" |
| 2603 | } |
| 2604 | ], |
| 2605 | "severity": "INFO" |
| 2606 | }, |
| 2607 | { |
| 2608 | "id": "vendored-rules.generic.secrets.gitleaks.easypost-test-api-token", |
| 2609 | "languages": [ |
| 2610 | "regex" |
| 2611 | ], |
| 2612 | "message": "A gitleaks Easypost Test API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2613 | "metadata": { |
| 2614 | "category": "security", |
| 2615 | "confidence": "LOW", |
| 2616 | "cwe": [ |
| 2617 | "CWE-798: Use of Hard-coded Credentials" |
| 2618 | ], |
| 2619 | "cwe2021-top25": true, |
| 2620 | "cwe2022-top25": true, |
| 2621 | "impact": "MEDIUM", |
| 2622 | "likelihood": "LOW", |
| 2623 | "owasp": [ |
| 2624 | "A07:2021 - Identification and Authentication Failures" |
| 2625 | ], |
| 2626 | "references": [ |
| 2627 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2628 | ], |
| 2629 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2630 | "subcategory": [ |
| 2631 | "vuln" |
| 2632 | ], |
| 2633 | "technology": [ |
| 2634 | "gitleaks" |
| 2635 | ] |
| 2636 | }, |
| 2637 | "patterns": [ |
| 2638 | { |
| 2639 | "pattern-regex": "\\bEZTK(?i)[a-z0-9]{54}" |
| 2640 | } |
| 2641 | ], |
| 2642 | "severity": "INFO" |
| 2643 | }, |
| 2644 | { |
| 2645 | "id": "vendored-rules.generic.secrets.gitleaks.etsy-access-token", |
| 2646 | "languages": [ |
| 2647 | "regex" |
| 2648 | ], |
| 2649 | "message": "A gitleaks Etsy Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2650 | "metadata": { |
| 2651 | "category": "security", |
| 2652 | "confidence": "LOW", |
| 2653 | "cwe": [ |
| 2654 | "CWE-798: Use of Hard-coded Credentials" |
| 2655 | ], |
| 2656 | "cwe2021-top25": true, |
| 2657 | "cwe2022-top25": true, |
| 2658 | "impact": "MEDIUM", |
| 2659 | "likelihood": "LOW", |
| 2660 | "owasp": [ |
| 2661 | "A07:2021 - Identification and Authentication Failures" |
| 2662 | ], |
| 2663 | "references": [ |
| 2664 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2665 | ], |
| 2666 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2667 | "subcategory": [ |
| 2668 | "vuln" |
| 2669 | ], |
| 2670 | "technology": [ |
| 2671 | "gitleaks" |
| 2672 | ] |
| 2673 | }, |
| 2674 | "patterns": [ |
| 2675 | { |
| 2676 | "pattern-regex": "(?i)(?:etsy)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2677 | } |
| 2678 | ], |
| 2679 | "severity": "INFO" |
| 2680 | }, |
| 2681 | { |
| 2682 | "id": "vendored-rules.generic.secrets.gitleaks.facebook-access-token", |
| 2683 | "languages": [ |
| 2684 | "regex" |
| 2685 | ], |
| 2686 | "message": "A gitleaks Facebook Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2687 | "metadata": { |
| 2688 | "category": "security", |
| 2689 | "confidence": "LOW", |
| 2690 | "cwe": [ |
| 2691 | "CWE-798: Use of Hard-coded Credentials" |
| 2692 | ], |
| 2693 | "cwe2021-top25": true, |
| 2694 | "cwe2022-top25": true, |
| 2695 | "impact": "MEDIUM", |
| 2696 | "likelihood": "LOW", |
| 2697 | "owasp": [ |
| 2698 | "A07:2021 - Identification and Authentication Failures" |
| 2699 | ], |
| 2700 | "references": [ |
| 2701 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2702 | ], |
| 2703 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2704 | "subcategory": [ |
| 2705 | "vuln" |
| 2706 | ], |
| 2707 | "technology": [ |
| 2708 | "gitleaks" |
| 2709 | ] |
| 2710 | }, |
| 2711 | "patterns": [ |
| 2712 | { |
| 2713 | "pattern-regex": "(?i)\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2714 | } |
| 2715 | ], |
| 2716 | "severity": "INFO" |
| 2717 | }, |
| 2718 | { |
| 2719 | "id": "vendored-rules.generic.secrets.gitleaks.facebook-page-access-token", |
| 2720 | "languages": [ |
| 2721 | "regex" |
| 2722 | ], |
| 2723 | "message": "A gitleaks Facebook Page Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2724 | "metadata": { |
| 2725 | "category": "security", |
| 2726 | "confidence": "LOW", |
| 2727 | "cwe": [ |
| 2728 | "CWE-798: Use of Hard-coded Credentials" |
| 2729 | ], |
| 2730 | "cwe2021-top25": true, |
| 2731 | "cwe2022-top25": true, |
| 2732 | "impact": "MEDIUM", |
| 2733 | "likelihood": "LOW", |
| 2734 | "owasp": [ |
| 2735 | "A07:2021 - Identification and Authentication Failures" |
| 2736 | ], |
| 2737 | "references": [ |
| 2738 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2739 | ], |
| 2740 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2741 | "subcategory": [ |
| 2742 | "vuln" |
| 2743 | ], |
| 2744 | "technology": [ |
| 2745 | "gitleaks" |
| 2746 | ] |
| 2747 | }, |
| 2748 | "patterns": [ |
| 2749 | { |
| 2750 | "pattern-regex": "(?i)\\b(EAA[MC][a-z0-9]{20,})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2751 | } |
| 2752 | ], |
| 2753 | "severity": "INFO" |
| 2754 | }, |
| 2755 | { |
| 2756 | "id": "vendored-rules.generic.secrets.gitleaks.facebook-secret", |
| 2757 | "languages": [ |
| 2758 | "regex" |
| 2759 | ], |
| 2760 | "message": "A gitleaks Facebook Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2761 | "metadata": { |
| 2762 | "category": "security", |
| 2763 | "confidence": "LOW", |
| 2764 | "cwe": [ |
| 2765 | "CWE-798: Use of Hard-coded Credentials" |
| 2766 | ], |
| 2767 | "cwe2021-top25": true, |
| 2768 | "cwe2022-top25": true, |
| 2769 | "impact": "MEDIUM", |
| 2770 | "likelihood": "LOW", |
| 2771 | "owasp": [ |
| 2772 | "A07:2021 - Identification and Authentication Failures" |
| 2773 | ], |
| 2774 | "references": [ |
| 2775 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2776 | ], |
| 2777 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2778 | "subcategory": [ |
| 2779 | "vuln" |
| 2780 | ], |
| 2781 | "technology": [ |
| 2782 | "gitleaks" |
| 2783 | ] |
| 2784 | }, |
| 2785 | "patterns": [ |
| 2786 | { |
| 2787 | "pattern-regex": "(?i)(?:facebook)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2788 | } |
| 2789 | ], |
| 2790 | "severity": "INFO" |
| 2791 | }, |
| 2792 | { |
| 2793 | "id": "vendored-rules.generic.secrets.gitleaks.facebook", |
| 2794 | "languages": [ |
| 2795 | "regex" |
| 2796 | ], |
| 2797 | "message": "A gitleaks Facebook credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2798 | "metadata": { |
| 2799 | "category": "security", |
| 2800 | "confidence": "LOW", |
| 2801 | "cwe": [ |
| 2802 | "CWE-798: Use of Hard-coded Credentials" |
| 2803 | ], |
| 2804 | "cwe2021-top25": true, |
| 2805 | "cwe2022-top25": true, |
| 2806 | "impact": "MEDIUM", |
| 2807 | "likelihood": "LOW", |
| 2808 | "owasp": [ |
| 2809 | "A07:2021 - Identification and Authentication Failures" |
| 2810 | ], |
| 2811 | "references": [ |
| 2812 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2813 | ], |
| 2814 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2815 | "subcategory": [ |
| 2816 | "vuln" |
| 2817 | ], |
| 2818 | "technology": [ |
| 2819 | "gitleaks" |
| 2820 | ] |
| 2821 | }, |
| 2822 | "patterns": [ |
| 2823 | { |
| 2824 | "pattern-regex": "(?i)(?:facebook)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2825 | } |
| 2826 | ], |
| 2827 | "severity": "INFO" |
| 2828 | }, |
| 2829 | { |
| 2830 | "id": "vendored-rules.generic.secrets.gitleaks.fastly-api-token", |
| 2831 | "languages": [ |
| 2832 | "regex" |
| 2833 | ], |
| 2834 | "message": "A gitleaks Fastly API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2835 | "metadata": { |
| 2836 | "category": "security", |
| 2837 | "confidence": "LOW", |
| 2838 | "cwe": [ |
| 2839 | "CWE-798: Use of Hard-coded Credentials" |
| 2840 | ], |
| 2841 | "cwe2021-top25": true, |
| 2842 | "cwe2022-top25": true, |
| 2843 | "impact": "MEDIUM", |
| 2844 | "likelihood": "LOW", |
| 2845 | "owasp": [ |
| 2846 | "A07:2021 - Identification and Authentication Failures" |
| 2847 | ], |
| 2848 | "references": [ |
| 2849 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2850 | ], |
| 2851 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2852 | "subcategory": [ |
| 2853 | "vuln" |
| 2854 | ], |
| 2855 | "technology": [ |
| 2856 | "gitleaks" |
| 2857 | ] |
| 2858 | }, |
| 2859 | "patterns": [ |
| 2860 | { |
| 2861 | "pattern-regex": "(?i)(?:fastly)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2862 | } |
| 2863 | ], |
| 2864 | "severity": "INFO" |
| 2865 | }, |
| 2866 | { |
| 2867 | "id": "vendored-rules.generic.secrets.gitleaks.finicity-api-token", |
| 2868 | "languages": [ |
| 2869 | "regex" |
| 2870 | ], |
| 2871 | "message": "A gitleaks Finicity API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2872 | "metadata": { |
| 2873 | "category": "security", |
| 2874 | "confidence": "LOW", |
| 2875 | "cwe": [ |
| 2876 | "CWE-798: Use of Hard-coded Credentials" |
| 2877 | ], |
| 2878 | "cwe2021-top25": true, |
| 2879 | "cwe2022-top25": true, |
| 2880 | "impact": "MEDIUM", |
| 2881 | "likelihood": "LOW", |
| 2882 | "owasp": [ |
| 2883 | "A07:2021 - Identification and Authentication Failures" |
| 2884 | ], |
| 2885 | "references": [ |
| 2886 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2887 | ], |
| 2888 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2889 | "subcategory": [ |
| 2890 | "vuln" |
| 2891 | ], |
| 2892 | "technology": [ |
| 2893 | "gitleaks" |
| 2894 | ] |
| 2895 | }, |
| 2896 | "patterns": [ |
| 2897 | { |
| 2898 | "pattern-regex": "(?i)(?:finicity)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2899 | } |
| 2900 | ], |
| 2901 | "severity": "INFO" |
| 2902 | }, |
| 2903 | { |
| 2904 | "id": "vendored-rules.generic.secrets.gitleaks.finicity-client-secret", |
| 2905 | "languages": [ |
| 2906 | "regex" |
| 2907 | ], |
| 2908 | "message": "A gitleaks Finicity Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2909 | "metadata": { |
| 2910 | "category": "security", |
| 2911 | "confidence": "LOW", |
| 2912 | "cwe": [ |
| 2913 | "CWE-798: Use of Hard-coded Credentials" |
| 2914 | ], |
| 2915 | "cwe2021-top25": true, |
| 2916 | "cwe2022-top25": true, |
| 2917 | "impact": "MEDIUM", |
| 2918 | "likelihood": "LOW", |
| 2919 | "owasp": [ |
| 2920 | "A07:2021 - Identification and Authentication Failures" |
| 2921 | ], |
| 2922 | "references": [ |
| 2923 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2924 | ], |
| 2925 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2926 | "subcategory": [ |
| 2927 | "vuln" |
| 2928 | ], |
| 2929 | "technology": [ |
| 2930 | "gitleaks" |
| 2931 | ] |
| 2932 | }, |
| 2933 | "patterns": [ |
| 2934 | { |
| 2935 | "pattern-regex": "(?i)(?:finicity)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2936 | } |
| 2937 | ], |
| 2938 | "severity": "INFO" |
| 2939 | }, |
| 2940 | { |
| 2941 | "id": "vendored-rules.generic.secrets.gitleaks.finnhub-access-token", |
| 2942 | "languages": [ |
| 2943 | "regex" |
| 2944 | ], |
| 2945 | "message": "A gitleaks Finnhub Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2946 | "metadata": { |
| 2947 | "category": "security", |
| 2948 | "confidence": "LOW", |
| 2949 | "cwe": [ |
| 2950 | "CWE-798: Use of Hard-coded Credentials" |
| 2951 | ], |
| 2952 | "cwe2021-top25": true, |
| 2953 | "cwe2022-top25": true, |
| 2954 | "impact": "MEDIUM", |
| 2955 | "likelihood": "LOW", |
| 2956 | "owasp": [ |
| 2957 | "A07:2021 - Identification and Authentication Failures" |
| 2958 | ], |
| 2959 | "references": [ |
| 2960 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2961 | ], |
| 2962 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 2963 | "subcategory": [ |
| 2964 | "vuln" |
| 2965 | ], |
| 2966 | "technology": [ |
| 2967 | "gitleaks" |
| 2968 | ] |
| 2969 | }, |
| 2970 | "patterns": [ |
| 2971 | { |
| 2972 | "pattern-regex": "(?i)(?:finnhub)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 2973 | } |
| 2974 | ], |
| 2975 | "severity": "INFO" |
| 2976 | }, |
| 2977 | { |
| 2978 | "id": "vendored-rules.generic.secrets.gitleaks.flickr-access-token", |
| 2979 | "languages": [ |
| 2980 | "regex" |
| 2981 | ], |
| 2982 | "message": "A gitleaks Flickr Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 2983 | "metadata": { |
| 2984 | "category": "security", |
| 2985 | "confidence": "LOW", |
| 2986 | "cwe": [ |
| 2987 | "CWE-798: Use of Hard-coded Credentials" |
| 2988 | ], |
| 2989 | "cwe2021-top25": true, |
| 2990 | "cwe2022-top25": true, |
| 2991 | "impact": "MEDIUM", |
| 2992 | "likelihood": "LOW", |
| 2993 | "owasp": [ |
| 2994 | "A07:2021 - Identification and Authentication Failures" |
| 2995 | ], |
| 2996 | "references": [ |
| 2997 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 2998 | ], |
| 2999 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3000 | "subcategory": [ |
| 3001 | "vuln" |
| 3002 | ], |
| 3003 | "technology": [ |
| 3004 | "gitleaks" |
| 3005 | ] |
| 3006 | }, |
| 3007 | "patterns": [ |
| 3008 | { |
| 3009 | "pattern-regex": "(?i)(?:flickr)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3010 | } |
| 3011 | ], |
| 3012 | "severity": "INFO" |
| 3013 | }, |
| 3014 | { |
| 3015 | "id": "vendored-rules.generic.secrets.gitleaks.flutterwave-encryption-key", |
| 3016 | "languages": [ |
| 3017 | "regex" |
| 3018 | ], |
| 3019 | "message": "A gitleaks Flutterwave Encryption Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3020 | "metadata": { |
| 3021 | "category": "security", |
| 3022 | "confidence": "LOW", |
| 3023 | "cwe": [ |
| 3024 | "CWE-798: Use of Hard-coded Credentials" |
| 3025 | ], |
| 3026 | "cwe2021-top25": true, |
| 3027 | "cwe2022-top25": true, |
| 3028 | "impact": "MEDIUM", |
| 3029 | "likelihood": "LOW", |
| 3030 | "owasp": [ |
| 3031 | "A07:2021 - Identification and Authentication Failures" |
| 3032 | ], |
| 3033 | "references": [ |
| 3034 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3035 | ], |
| 3036 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3037 | "subcategory": [ |
| 3038 | "vuln" |
| 3039 | ], |
| 3040 | "technology": [ |
| 3041 | "gitleaks" |
| 3042 | ] |
| 3043 | }, |
| 3044 | "patterns": [ |
| 3045 | { |
| 3046 | "pattern-regex": "FLWSECK_TEST-(?i)[a-h0-9]{12}" |
| 3047 | } |
| 3048 | ], |
| 3049 | "severity": "INFO" |
| 3050 | }, |
| 3051 | { |
| 3052 | "id": "vendored-rules.generic.secrets.gitleaks.flutterwave-public-key", |
| 3053 | "languages": [ |
| 3054 | "regex" |
| 3055 | ], |
| 3056 | "message": "A gitleaks Flutterwave Public Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3057 | "metadata": { |
| 3058 | "category": "security", |
| 3059 | "confidence": "LOW", |
| 3060 | "cwe": [ |
| 3061 | "CWE-798: Use of Hard-coded Credentials" |
| 3062 | ], |
| 3063 | "cwe2021-top25": true, |
| 3064 | "cwe2022-top25": true, |
| 3065 | "impact": "MEDIUM", |
| 3066 | "likelihood": "LOW", |
| 3067 | "owasp": [ |
| 3068 | "A07:2021 - Identification and Authentication Failures" |
| 3069 | ], |
| 3070 | "references": [ |
| 3071 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3072 | ], |
| 3073 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3074 | "subcategory": [ |
| 3075 | "vuln" |
| 3076 | ], |
| 3077 | "technology": [ |
| 3078 | "gitleaks" |
| 3079 | ] |
| 3080 | }, |
| 3081 | "patterns": [ |
| 3082 | { |
| 3083 | "pattern-regex": "FLWPUBK_TEST-(?i)[a-h0-9]{32}-X" |
| 3084 | } |
| 3085 | ], |
| 3086 | "severity": "INFO" |
| 3087 | }, |
| 3088 | { |
| 3089 | "id": "vendored-rules.generic.secrets.gitleaks.flutterwave-secret-key", |
| 3090 | "languages": [ |
| 3091 | "regex" |
| 3092 | ], |
| 3093 | "message": "A gitleaks Flutterwave Secret Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3094 | "metadata": { |
| 3095 | "category": "security", |
| 3096 | "confidence": "LOW", |
| 3097 | "cwe": [ |
| 3098 | "CWE-798: Use of Hard-coded Credentials" |
| 3099 | ], |
| 3100 | "cwe2021-top25": true, |
| 3101 | "cwe2022-top25": true, |
| 3102 | "impact": "MEDIUM", |
| 3103 | "likelihood": "LOW", |
| 3104 | "owasp": [ |
| 3105 | "A07:2021 - Identification and Authentication Failures" |
| 3106 | ], |
| 3107 | "references": [ |
| 3108 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3109 | ], |
| 3110 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3111 | "subcategory": [ |
| 3112 | "vuln" |
| 3113 | ], |
| 3114 | "technology": [ |
| 3115 | "gitleaks" |
| 3116 | ] |
| 3117 | }, |
| 3118 | "patterns": [ |
| 3119 | { |
| 3120 | "pattern-regex": "FLWSECK_TEST-(?i)[a-h0-9]{32}-X" |
| 3121 | } |
| 3122 | ], |
| 3123 | "severity": "INFO" |
| 3124 | }, |
| 3125 | { |
| 3126 | "id": "vendored-rules.generic.secrets.gitleaks.frameio-api-token", |
| 3127 | "languages": [ |
| 3128 | "regex" |
| 3129 | ], |
| 3130 | "message": "A gitleaks Frameio API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3131 | "metadata": { |
| 3132 | "category": "security", |
| 3133 | "confidence": "LOW", |
| 3134 | "cwe": [ |
| 3135 | "CWE-798: Use of Hard-coded Credentials" |
| 3136 | ], |
| 3137 | "cwe2021-top25": true, |
| 3138 | "cwe2022-top25": true, |
| 3139 | "impact": "MEDIUM", |
| 3140 | "likelihood": "LOW", |
| 3141 | "owasp": [ |
| 3142 | "A07:2021 - Identification and Authentication Failures" |
| 3143 | ], |
| 3144 | "references": [ |
| 3145 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3146 | ], |
| 3147 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3148 | "subcategory": [ |
| 3149 | "vuln" |
| 3150 | ], |
| 3151 | "technology": [ |
| 3152 | "gitleaks" |
| 3153 | ] |
| 3154 | }, |
| 3155 | "patterns": [ |
| 3156 | { |
| 3157 | "pattern-regex": "fio-u-(?i)[a-z0-9\\-_=]{64}" |
| 3158 | } |
| 3159 | ], |
| 3160 | "severity": "INFO" |
| 3161 | }, |
| 3162 | { |
| 3163 | "id": "vendored-rules.generic.secrets.gitleaks.freshbooks-access-token", |
| 3164 | "languages": [ |
| 3165 | "regex" |
| 3166 | ], |
| 3167 | "message": "A gitleaks Freshbooks Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3168 | "metadata": { |
| 3169 | "category": "security", |
| 3170 | "confidence": "LOW", |
| 3171 | "cwe": [ |
| 3172 | "CWE-798: Use of Hard-coded Credentials" |
| 3173 | ], |
| 3174 | "cwe2021-top25": true, |
| 3175 | "cwe2022-top25": true, |
| 3176 | "impact": "MEDIUM", |
| 3177 | "likelihood": "LOW", |
| 3178 | "owasp": [ |
| 3179 | "A07:2021 - Identification and Authentication Failures" |
| 3180 | ], |
| 3181 | "references": [ |
| 3182 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3183 | ], |
| 3184 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3185 | "subcategory": [ |
| 3186 | "vuln" |
| 3187 | ], |
| 3188 | "technology": [ |
| 3189 | "gitleaks" |
| 3190 | ] |
| 3191 | }, |
| 3192 | "patterns": [ |
| 3193 | { |
| 3194 | "pattern-regex": "(?i)(?:freshbooks)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3195 | } |
| 3196 | ], |
| 3197 | "severity": "INFO" |
| 3198 | }, |
| 3199 | { |
| 3200 | "id": "vendored-rules.generic.secrets.gitleaks.gcp-api-key", |
| 3201 | "languages": [ |
| 3202 | "regex" |
| 3203 | ], |
| 3204 | "message": "A gitleaks GCP API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3205 | "metadata": { |
| 3206 | "category": "security", |
| 3207 | "confidence": "LOW", |
| 3208 | "cwe": [ |
| 3209 | "CWE-798: Use of Hard-coded Credentials" |
| 3210 | ], |
| 3211 | "cwe2021-top25": true, |
| 3212 | "cwe2022-top25": true, |
| 3213 | "impact": "MEDIUM", |
| 3214 | "likelihood": "LOW", |
| 3215 | "owasp": [ |
| 3216 | "A07:2021 - Identification and Authentication Failures" |
| 3217 | ], |
| 3218 | "references": [ |
| 3219 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3220 | ], |
| 3221 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3222 | "subcategory": [ |
| 3223 | "vuln" |
| 3224 | ], |
| 3225 | "technology": [ |
| 3226 | "gitleaks" |
| 3227 | ] |
| 3228 | }, |
| 3229 | "patterns": [ |
| 3230 | { |
| 3231 | "pattern-regex": "(?i)\\b(AIza[0-9A-Za-z\\\\-_]{35})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3232 | } |
| 3233 | ], |
| 3234 | "severity": "INFO" |
| 3235 | }, |
| 3236 | { |
| 3237 | "id": "vendored-rules.generic.secrets.gitleaks.generic-api-key", |
| 3238 | "languages": [ |
| 3239 | "regex" |
| 3240 | ], |
| 3241 | "message": "A gitleaks Generic API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3242 | "metadata": { |
| 3243 | "category": "security", |
| 3244 | "confidence": "LOW", |
| 3245 | "cwe": [ |
| 3246 | "CWE-798: Use of Hard-coded Credentials" |
| 3247 | ], |
| 3248 | "cwe2021-top25": true, |
| 3249 | "cwe2022-top25": true, |
| 3250 | "impact": "MEDIUM", |
| 3251 | "likelihood": "LOW", |
| 3252 | "owasp": [ |
| 3253 | "A07:2021 - Identification and Authentication Failures" |
| 3254 | ], |
| 3255 | "references": [ |
| 3256 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3257 | ], |
| 3258 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3259 | "subcategory": [ |
| 3260 | "vuln" |
| 3261 | ], |
| 3262 | "technology": [ |
| 3263 | "gitleaks" |
| 3264 | ] |
| 3265 | }, |
| 3266 | "paths": { |
| 3267 | "exclude": [ |
| 3268 | "*.svg", |
| 3269 | "*go.sum", |
| 3270 | "*cargo.lock", |
| 3271 | "*package.json", |
| 3272 | "*package-lock.json", |
| 3273 | "*bundle.js", |
| 3274 | "*pnpm-lock*", |
| 3275 | "*Podfile.lock", |
| 3276 | "*/openssl/*.h", |
| 3277 | "*.xcscmblueprint" |
| 3278 | ] |
| 3279 | }, |
| 3280 | "patterns": [ |
| 3281 | { |
| 3282 | "pattern-regex": "(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\\-_\\t.]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:=|\\|\\|:|<=|=>|:)(?:'|@\\\"|\\\"|\\s|=|\\x60){0,5}(?!([a-z]+\\.[a-zA-Z]+)|.*(\\d{4}-\\d{2}-\\d{2})|:*(?!(\"|'))[0-9A-Za-z]+\\.[0-9A-Za-z]+,|[A-Z]+_[A-Z]+_)(?P<CONTENT>[0-9a-z\\-_.=\\~@]{10,150})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3283 | }, |
| 3284 | { |
| 3285 | "metavariable-analysis": { |
| 3286 | "analyzer": "entropy", |
| 3287 | "metavariable": "$CONTENT" |
| 3288 | } |
| 3289 | }, |
| 3290 | { |
| 3291 | "focus-metavariable": "$CONTENT" |
| 3292 | }, |
| 3293 | { |
| 3294 | "pattern-not-regex": ".*((?i)omitted|arn:aws|(?i)(pub.*key|public.*key)|(?i)clientToken|symbol|cache|author\\.).*" |
| 3295 | }, |
| 3296 | { |
| 3297 | "pattern-not-regex": "(\\d\\.\\d\\.\\d-}|([\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3})|(\\w)\\1{5}|(?i)keywords|xxxx|eeeeeeee|0000|\\*\\*\\*|example|test|author=|author(\"|')|preview|[A-Z]+_KEY|[.]value|[.]key|-\\d\\.\\d\\.)" |
| 3298 | }, |
| 3299 | { |
| 3300 | "metavariable-regex": { |
| 3301 | "metavariable": "$CONTENT", |
| 3302 | "regex": "(?!(^0x0*|^pub)|.*\\.(bin|json|exe)$|.*(?i)(Client|Factory)$|(^__[A-Za-z]+__$)|^(12345|abcd)|^\\d+(\\.\\d+)?$)" |
| 3303 | } |
| 3304 | }, |
| 3305 | { |
| 3306 | "pattern-not-regex": "(\\w|\\.)\\1{5}" |
| 3307 | }, |
| 3308 | { |
| 3309 | "metavariable-regex": { |
| 3310 | "metavariable": "$CONTENT", |
| 3311 | "regex": "(?!(?i).*(client|endpoint|vpn|_ec2_|aws_|authorize|author|define|config|credential|setting|sample|xxxxxx|000000|buffer|delete|aaaaaa|fewfwef|getenv|env_|system|example|ecdsa|sha256|sha1|sha2|md5|alert|wizard|target|onboard|welcome|page|exploit|experiment|expire|rabbitmq|scraper|widget|music|dns_|dns-|yahoo|want|json|action|script|fix_|fix-|develop|compas|stripe|service|master|metric|tech|gitignore|rich|open|stack|irc_|irc-|sublime|kohana|has_|has-|fabric|wordpres|role|osx_|osx-|boost|addres|queue|working|sandbox|internet|print|vision|tracking|being|generator|traffic|world|pull|rust|watcher|small|auth|full|hash|more|install|auto|complete|learn|paper|installer|research|acces|last|binding|spine|into|chat|algorithm|resource|uploader|video|maker|next|proc|lock|robot|snake|patch|matrix|drill|terminal|term|stuff|genetic|generic|identity|audit|pattern|audio|web_|web-|crud|problem|statu|cms-|cms_|arch|coffee|workflow|changelog|another|uiview|content|kitchen|gnu_|gnu-|gnu\\.|conf|couchdb|client|opencv|rendering|update|concept|varnish|gui_|gui-|gui\\.|version|shared|extra|product|still|not_|not-|not\\.|drop|ring|png_|png-|png\\.|actively|import|output|backup|start|embedded|registry|pool|semantic|instagram|bash|system|ninja|drupal|jquery|polyfill|physic|league|guide|pack|synopsi|sketch|injection|svg_|svg-|svg\\.|friendly|wave|convert|manage|camera|link|slide|timer|wrapper|gallery|url_|url-|url\\.|todomvc|requirej|party|http|payment|async|library|home|coco|gaia|display|universal|func|metadata|hipchat|under|room|config|personal|realtime|resume|database|testing|tiny|basic|forum|meetup|yet_|yet-|yet\\.|cento|dead|fluentd|editor|utilitie|run_|run-|run\\.|box_|box-|box\\.|bot_|bot-|bot\\.|making|sample|group|monitor|ajax|parallel|cassandra|ultimate|site|get_|get-|get\\.|gen_|gen-|gen\\.|gem_|gem-|gem\\.|extended|image|knife|asset|nested|zero|plugin|bracket|mule|mozilla|number|act_|act-|act\\.|map_|map-|map\\.|micro|debug|openshift|chart|expres|backend|task|source|translate|jbos|composer|sqlite|profile|mustache|mqtt|yeoman|have|builder|smart|like|oauth|school|guideline|captcha|filter|bitcoin|bridge|color|toolbox|discovery|new_|new-|new\\.|dashboard|when|setting|level|post|standard|port|platform|yui_|yui-|yui\\.|grunt|animation|haskell|icon|latex|cheat|lua_|lua-|lua\\.|gulp|case|author|without|simulator|wifi|directory|lisp|list|flat|adventure|story|storm|gpu_|gpu-|gpu\\.|store|caching|attention|solr|logger|demo|shortener|hadoop|finder|phone|pipeline|range|textmate|showcase|app_|app-|app\\.|idiomatic|edit|our_|our-|our\\.|out_|out-|out\\.|sentiment|linked|why_|why-|why\\.|local|cube|gmail|job_|job-|job\\.|rpc_|rpc-|rpc\\.|contest|tcp_|tcp-|tcp\\.|usage|buildout|weather|transfer|automated|sphinx|issue|sas_|sas-|sas\\.|parallax|jasmine|addon|machine|solution|dsl_|dsl-|dsl\\.|episode|menu|theme|best|adapter|debugger|chrome|tutorial|life|step|people|joomla|paypal|developer|solver|team|current|love|visual|date|data|canva|container|future|xml_|xml-|xml\\.|twig|nagio|spatial|original|sync|archived|refinery|science|mapping|gitlab|play|ext_|ext-|ext\\.|session|impact|set_|set-|set\\.|see_|see-|see\\.|migration|commit|community|shopify|what'|cucumber|statamic|mysql|location|tower|line|code|amqp|hello|send|index|high|notebook|alloy|python|field|document|soap|edition|email|php_|php-|php\\.|command|transport|official|upload|study|secure|angularj|akka|scalable|package|request|con_|con-|con\\.|flexible|security|comment|module|flask|graph|flash|apache|change|window|space|lambda|sheet|bookmark|carousel|friend|objective|jekyll|bootstrap|first|article|gwt_|gwt-|gwt\\.|classic|media|websocket|touch|desktop|real|read|recorder|moved|storage|validator|add-on|pusher|scs_|scs-|scs\\.|inline|asp_|asp-|asp\\.|timeline|base|encoding|ffmpeg|kindle|tinymce|pretty|jpa_|jpa-|jpa\\.|used|user|required|webhook|download|resque|espresso|cloud|mongo|benchmark|pure|cakephp|modx|mode|reactive|fuel|written|flickr|mail|brunch|meteor|dynamic|neo_|neo-|neo\\.|new_|new-|new\\.|net_|net-|net\\.|typo|type|keyboard|erlang|adobe|logging|ckeditor|message|iso_|iso-|iso\\.|hook|ldap|folder|reference|railscast|www_|www-|www\\.|tracker|azure|fork|form|digital|exporter|skin|string|template|designer|gollum|fluent|entity|language|alfred|summary|wiki|kernel|calendar|plupload|symfony|foundry|remote|talk|search|dev_|dev-|dev\\.|del_|del-|del\\.|token|idea|sencha|selector|interface|create|fun_|fun-|fun\\.|groovy|query|grail|red_|red-|red\\.|laravel|monkey|slack|supported|instant|value|center|latest|work|but_|but-|but\\.|bug_|bug-|bug\\.|virtual|tweet|statsd|studio|path|real-time|frontend|notifier|coding|tool|firmware|flow|random|mediawiki|bosh|been|beer|lightbox|theory|origin|redmine|hub_|hub-|hub\\.|require|pro_|pro-|pro\\.|ant_|ant-|ant\\.|any_|any-|any\\.|recipe|closure|mapper|event|todo|model|redi|provider|rvm_|rvm-|rvm\\.|program|memcached|rail|silex|foreman|activity|license|strategy|batch|streaming|fast|use_|use-|use\\.|usb_|usb-|usb\\.|impres|academy|slider|please|layer|cros|now_|now-|now\\.|miner|extension|own_|own-|own\\.|app_|app-|app\\.|debian|symphony|example|feature|serie|tree|project|runner|entry|leetcode|layout|webrtc|logic|login|worker|toolkit|mocha|support|back|inside|device|jenkin|contact|fake|awesome|ocaml|bit_|bit-|bit\\.|drive|screen|prototype|gist|binary|nosql|rest|overview|dart|dark|emac|mongoid|solarized|homepage|emulator|commander|django|yandex|gradle|xcode|writer|crm_|crm-|crm\\.|jade|startup|error|using|format|name|spring|parser|scratch|magic|try_|try-|try\\.|rack|directive|challenge|slim|counter|element|chosen|doc_|doc-|doc\\.|meta|should|button|packet|stream|hardware|android|infinite|password|software|ghost|xamarin|spec|chef|interview|hubot|mvc_|mvc-|mvc\\.|exercise|leaflet|launcher|air_|air-|air\\.|photo|board|boxen|way_|way-|way\\.|computing|welcome|notepad|portfolio|cat_|cat-|cat\\.|can_|can-|can\\.|magento|yaml|domain|card|yii_|yii-|yii\\.|checker|browser|upgrade|only|progres|aura|ruby_|ruby-|ruby\\.|polymer|util|lite|hackathon|rule|log_|log-|log\\.|opengl|stanford|skeleton|history|inspector|help|soon|selenium|lab_|lab-|lab\\.|scheme|schema|look|ready|leveldb|docker|game|minimal|logstash|messaging|within|heroku|mongodb|kata|suite|picker|win_|win-|win\\.|wip_|wip-|wip\\.|panel|started|starter|front-end|detector|deploy|editing|based|admin|capture|spree|page|bundle|goal|rpg_|rpg-|rpg\\.|setup|side|mean|reader|cookbook|mini|modern|seed|dom_|dom-|dom\\.|doc_|doc-|doc\\.|dot_|dot-|dot\\.|syntax|sugar|loader|website|make|kit_|kit-|kit\\.|protocol|human|daemon|golang|manager|countdown|connector|swagger|map_|map-|map\\.|mac_|mac-|mac\\.|man_|man-|man\\.|orm_|orm-|orm\\.|org_|org-|org\\.|little|zsh_|zsh-|zsh\\.|shop|show|workshop|money|grid|server|octopres|svn_|svn-|svn\\.|ember|embed|general|file|important|dropbox|portable|public|docpad|fish|sbt_|sbt-|sbt\\.|done|para|network|common|readme|popup|simple|purpose|mirror|single|cordova|exchange|object|design|gateway|account|lamp|intellij|math|mit_|mit-|mit\\.|control|enhanced|emitter|multi|add_|add-|add\\.|about|socket|preview|vagrant|cli_|cli-|cli\\.|powerful|top_|top-|top\\.|radio|watch|fluid|amazon|report|couchbase|automatic|detection|sprite|pyramid|portal|advanced|plu_|plu-|plu\\.|runtime|git_|git-|git\\.|uri_|uri-|uri\\.|haml|node|sql_|sql-|sql\\.|cool|core|obsolete|handler|iphone|extractor|array|copy|nlp_|nlp-|nlp\\.|reveal|pop_|pop-|pop\\.|engine|parse|check|html|nest|all_|all-|all\\.|chinese|buildpack|what|tag_|tag-|tag\\.|proxy|style|cookie|feed|restful|compiler|creating|prelude|context|java|rspec|mock|backbone|light|spotify|flex|related|shell|which|clas|webapp|swift|ansible|unity|console|tumblr|export|campfire|conway'|made|riak|hero|here|unix|unit|glas|smtp|how_|how-|how\\.|hot_|hot-|hot\\.|debug|release|diff|player|easy|right|old_|old-|old\\.|animate|time|push|explorer|course|training|nette|router|draft|structure|note|salt|where|spark|trello|power|method|social|via_|via-|via\\.|vim_|vim-|vim\\.|select|webkit|github|ftp_|ftp-|ftp\\.|creator|mongoose|led_|led-|led\\.|movie|currently|pdf_|pdf-|pdf\\.|load|markdown|phalcon|input|custom|atom|oracle|phonegap|ubuntu|great|rdf_|rdf-|rdf\\.|popcorn|firefox|zip_|zip-|zip\\.|cuda|dotfile|static|openwrt|viewer|powered|graphic|les_|les-|les\\.|doe_|doe-|doe\\.|maven|word|eclipse|lab_|lab-|lab\\.|hacking|steam|analytic|option|abstract|archive|reality|switcher|club|write|kafka|arduino|angular|online|title|don't|contao|notice|analyzer|learning|zend|external|staging|busines|tdd_|tdd-|tdd\\.|scanner|building|snippet|modular|bower|stm_|stm-|stm\\.|lib_|lib-|lib\\.|alpha|mobile|clean|linux|nginx|manifest|some|raspberry|gnome|ide_|ide-|ide\\.|block|statistic|info|drag|youtube|koan|facebook|paperclip|art_|art-|art\\.|quality|tab_|tab-|tab\\.|need|dojo|shield|computer|stat|state|twitter|utility|converter|hosting|devise|liferay|updated|force|tip_|tip-|tip\\.|behavior|active|call|answer|deck|better|principle|ches|bar_|bar-|bar\\.|reddit|three|haxe|just|plug-in|agile|manual|tetri|super|beta|parsing|doctrine|minecraft|useful|perl|sharing|agent|switch|view|dash|channel|repo|pebble|profiler|warning|cluster|running|markup|evented|mod_|mod-|mod\\.|share|csv_|csv-|csv\\.|response|good|house|connect|built|build|find|ipython|webgl|big_|big-|big\\.|google|scala|sdl_|sdl-|sdl\\.|sdk_|sdk-|sdk\\.|native|day_|day-|day\\.|puppet|text|routing|helper|linkedin|crawler|host|guard|merchant|poker|over|writing|free|classe|component|craft|nodej|phoenix|longer|quick|lazy|memory|clone|hacker|middleman|factory|motion|multiple|tornado|hack|ssh_|ssh-|ssh\\.|review|vimrc|driver|driven|blog|particle|table|intro|importer|thrift|xmpp|framework|refresh|react|font|librarie|variou|formatter|analysi|karma|scroll|tut_|tut-|tut\\.|apple|tag_|tag-|tag\\.|tab_|tab-|tab\\.|category|ionic|cache|homebrew|reverse|english|getting|shipping|clojure|boot|book|branch|combination|combo))" |
| 3312 | } |
| 3313 | } |
| 3314 | ], |
| 3315 | "severity": "INFO" |
| 3316 | }, |
| 3317 | { |
| 3318 | "id": "vendored-rules.generic.secrets.gitleaks.github-app-token", |
| 3319 | "languages": [ |
| 3320 | "regex" |
| 3321 | ], |
| 3322 | "message": "A gitleaks Github App Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3323 | "metadata": { |
| 3324 | "category": "security", |
| 3325 | "confidence": "LOW", |
| 3326 | "cwe": [ |
| 3327 | "CWE-798: Use of Hard-coded Credentials" |
| 3328 | ], |
| 3329 | "cwe2021-top25": true, |
| 3330 | "cwe2022-top25": true, |
| 3331 | "impact": "MEDIUM", |
| 3332 | "likelihood": "LOW", |
| 3333 | "owasp": [ |
| 3334 | "A07:2021 - Identification and Authentication Failures" |
| 3335 | ], |
| 3336 | "references": [ |
| 3337 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3338 | ], |
| 3339 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3340 | "subcategory": [ |
| 3341 | "vuln" |
| 3342 | ], |
| 3343 | "technology": [ |
| 3344 | "gitleaks" |
| 3345 | ] |
| 3346 | }, |
| 3347 | "patterns": [ |
| 3348 | { |
| 3349 | "pattern-regex": "(ghu|ghs)_[0-9a-zA-Z]{36}" |
| 3350 | } |
| 3351 | ], |
| 3352 | "severity": "INFO" |
| 3353 | }, |
| 3354 | { |
| 3355 | "id": "vendored-rules.generic.secrets.gitleaks.github-fine-grained-pat", |
| 3356 | "languages": [ |
| 3357 | "regex" |
| 3358 | ], |
| 3359 | "message": "A gitleaks Github Fine Grained Pat credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3360 | "metadata": { |
| 3361 | "category": "security", |
| 3362 | "confidence": "LOW", |
| 3363 | "cwe": [ |
| 3364 | "CWE-798: Use of Hard-coded Credentials" |
| 3365 | ], |
| 3366 | "cwe2021-top25": true, |
| 3367 | "cwe2022-top25": true, |
| 3368 | "impact": "MEDIUM", |
| 3369 | "likelihood": "LOW", |
| 3370 | "owasp": [ |
| 3371 | "A07:2021 - Identification and Authentication Failures" |
| 3372 | ], |
| 3373 | "references": [ |
| 3374 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3375 | ], |
| 3376 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3377 | "subcategory": [ |
| 3378 | "vuln" |
| 3379 | ], |
| 3380 | "technology": [ |
| 3381 | "gitleaks" |
| 3382 | ] |
| 3383 | }, |
| 3384 | "patterns": [ |
| 3385 | { |
| 3386 | "pattern-regex": "github_pat_[0-9a-zA-Z_]{82}" |
| 3387 | } |
| 3388 | ], |
| 3389 | "severity": "INFO" |
| 3390 | }, |
| 3391 | { |
| 3392 | "id": "vendored-rules.generic.secrets.gitleaks.github-oauth", |
| 3393 | "languages": [ |
| 3394 | "regex" |
| 3395 | ], |
| 3396 | "message": "A gitleaks Github OAuth credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3397 | "metadata": { |
| 3398 | "category": "security", |
| 3399 | "confidence": "LOW", |
| 3400 | "cwe": [ |
| 3401 | "CWE-798: Use of Hard-coded Credentials" |
| 3402 | ], |
| 3403 | "cwe2021-top25": true, |
| 3404 | "cwe2022-top25": true, |
| 3405 | "impact": "MEDIUM", |
| 3406 | "likelihood": "LOW", |
| 3407 | "owasp": [ |
| 3408 | "A07:2021 - Identification and Authentication Failures" |
| 3409 | ], |
| 3410 | "references": [ |
| 3411 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3412 | ], |
| 3413 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3414 | "subcategory": [ |
| 3415 | "vuln" |
| 3416 | ], |
| 3417 | "technology": [ |
| 3418 | "gitleaks" |
| 3419 | ] |
| 3420 | }, |
| 3421 | "patterns": [ |
| 3422 | { |
| 3423 | "pattern-regex": "gho_[0-9a-zA-Z]{36}" |
| 3424 | } |
| 3425 | ], |
| 3426 | "severity": "INFO" |
| 3427 | }, |
| 3428 | { |
| 3429 | "id": "vendored-rules.generic.secrets.gitleaks.github-pat", |
| 3430 | "languages": [ |
| 3431 | "regex" |
| 3432 | ], |
| 3433 | "message": "A gitleaks Github Pat credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3434 | "metadata": { |
| 3435 | "category": "security", |
| 3436 | "confidence": "LOW", |
| 3437 | "cwe": [ |
| 3438 | "CWE-798: Use of Hard-coded Credentials" |
| 3439 | ], |
| 3440 | "cwe2021-top25": true, |
| 3441 | "cwe2022-top25": true, |
| 3442 | "impact": "MEDIUM", |
| 3443 | "likelihood": "LOW", |
| 3444 | "owasp": [ |
| 3445 | "A07:2021 - Identification and Authentication Failures" |
| 3446 | ], |
| 3447 | "references": [ |
| 3448 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3449 | ], |
| 3450 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3451 | "subcategory": [ |
| 3452 | "vuln" |
| 3453 | ], |
| 3454 | "technology": [ |
| 3455 | "gitleaks" |
| 3456 | ] |
| 3457 | }, |
| 3458 | "patterns": [ |
| 3459 | { |
| 3460 | "pattern-regex": "ghp_[0-9a-zA-Z]{36}" |
| 3461 | } |
| 3462 | ], |
| 3463 | "severity": "INFO" |
| 3464 | }, |
| 3465 | { |
| 3466 | "id": "vendored-rules.generic.secrets.gitleaks.github-refresh-token", |
| 3467 | "languages": [ |
| 3468 | "regex" |
| 3469 | ], |
| 3470 | "message": "A gitleaks Github Refresh Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3471 | "metadata": { |
| 3472 | "category": "security", |
| 3473 | "confidence": "LOW", |
| 3474 | "cwe": [ |
| 3475 | "CWE-798: Use of Hard-coded Credentials" |
| 3476 | ], |
| 3477 | "cwe2021-top25": true, |
| 3478 | "cwe2022-top25": true, |
| 3479 | "impact": "MEDIUM", |
| 3480 | "likelihood": "LOW", |
| 3481 | "owasp": [ |
| 3482 | "A07:2021 - Identification and Authentication Failures" |
| 3483 | ], |
| 3484 | "references": [ |
| 3485 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3486 | ], |
| 3487 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3488 | "subcategory": [ |
| 3489 | "vuln" |
| 3490 | ], |
| 3491 | "technology": [ |
| 3492 | "gitleaks" |
| 3493 | ] |
| 3494 | }, |
| 3495 | "patterns": [ |
| 3496 | { |
| 3497 | "pattern-regex": "ghr_[0-9a-zA-Z]{36}" |
| 3498 | } |
| 3499 | ], |
| 3500 | "severity": "INFO" |
| 3501 | }, |
| 3502 | { |
| 3503 | "id": "vendored-rules.generic.secrets.gitleaks.gitlab-pat", |
| 3504 | "languages": [ |
| 3505 | "regex" |
| 3506 | ], |
| 3507 | "message": "A gitleaks Gitlab Pat credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3508 | "metadata": { |
| 3509 | "category": "security", |
| 3510 | "confidence": "LOW", |
| 3511 | "cwe": [ |
| 3512 | "CWE-798: Use of Hard-coded Credentials" |
| 3513 | ], |
| 3514 | "cwe2021-top25": true, |
| 3515 | "cwe2022-top25": true, |
| 3516 | "impact": "MEDIUM", |
| 3517 | "likelihood": "LOW", |
| 3518 | "owasp": [ |
| 3519 | "A07:2021 - Identification and Authentication Failures" |
| 3520 | ], |
| 3521 | "references": [ |
| 3522 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3523 | ], |
| 3524 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3525 | "subcategory": [ |
| 3526 | "vuln" |
| 3527 | ], |
| 3528 | "technology": [ |
| 3529 | "gitleaks" |
| 3530 | ] |
| 3531 | }, |
| 3532 | "patterns": [ |
| 3533 | { |
| 3534 | "pattern-regex": "glpat-[0-9a-zA-Z\\-\\_]{20}" |
| 3535 | } |
| 3536 | ], |
| 3537 | "severity": "INFO" |
| 3538 | }, |
| 3539 | { |
| 3540 | "id": "vendored-rules.generic.secrets.gitleaks.gitlab-ptt", |
| 3541 | "languages": [ |
| 3542 | "regex" |
| 3543 | ], |
| 3544 | "message": "A gitleaks Gitlab Ptt credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3545 | "metadata": { |
| 3546 | "category": "security", |
| 3547 | "confidence": "LOW", |
| 3548 | "cwe": [ |
| 3549 | "CWE-798: Use of Hard-coded Credentials" |
| 3550 | ], |
| 3551 | "cwe2021-top25": true, |
| 3552 | "cwe2022-top25": true, |
| 3553 | "impact": "MEDIUM", |
| 3554 | "likelihood": "LOW", |
| 3555 | "owasp": [ |
| 3556 | "A07:2021 - Identification and Authentication Failures" |
| 3557 | ], |
| 3558 | "references": [ |
| 3559 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3560 | ], |
| 3561 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3562 | "subcategory": [ |
| 3563 | "vuln" |
| 3564 | ], |
| 3565 | "technology": [ |
| 3566 | "gitleaks" |
| 3567 | ] |
| 3568 | }, |
| 3569 | "patterns": [ |
| 3570 | { |
| 3571 | "pattern-regex": "glptt-[0-9a-f]{40}" |
| 3572 | } |
| 3573 | ], |
| 3574 | "severity": "INFO" |
| 3575 | }, |
| 3576 | { |
| 3577 | "id": "vendored-rules.generic.secrets.gitleaks.gitlab-rrt", |
| 3578 | "languages": [ |
| 3579 | "regex" |
| 3580 | ], |
| 3581 | "message": "A gitleaks Gitlab Rrt credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3582 | "metadata": { |
| 3583 | "category": "security", |
| 3584 | "confidence": "LOW", |
| 3585 | "cwe": [ |
| 3586 | "CWE-798: Use of Hard-coded Credentials" |
| 3587 | ], |
| 3588 | "cwe2021-top25": true, |
| 3589 | "cwe2022-top25": true, |
| 3590 | "impact": "MEDIUM", |
| 3591 | "likelihood": "LOW", |
| 3592 | "owasp": [ |
| 3593 | "A07:2021 - Identification and Authentication Failures" |
| 3594 | ], |
| 3595 | "references": [ |
| 3596 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3597 | ], |
| 3598 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3599 | "subcategory": [ |
| 3600 | "vuln" |
| 3601 | ], |
| 3602 | "technology": [ |
| 3603 | "gitleaks" |
| 3604 | ] |
| 3605 | }, |
| 3606 | "patterns": [ |
| 3607 | { |
| 3608 | "pattern-regex": "GR1348941[0-9a-zA-Z\\-\\_]{20}" |
| 3609 | } |
| 3610 | ], |
| 3611 | "severity": "INFO" |
| 3612 | }, |
| 3613 | { |
| 3614 | "id": "vendored-rules.generic.secrets.gitleaks.gitter-access-token", |
| 3615 | "languages": [ |
| 3616 | "regex" |
| 3617 | ], |
| 3618 | "message": "A gitleaks Gitter Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3619 | "metadata": { |
| 3620 | "category": "security", |
| 3621 | "confidence": "LOW", |
| 3622 | "cwe": [ |
| 3623 | "CWE-798: Use of Hard-coded Credentials" |
| 3624 | ], |
| 3625 | "cwe2021-top25": true, |
| 3626 | "cwe2022-top25": true, |
| 3627 | "impact": "MEDIUM", |
| 3628 | "likelihood": "LOW", |
| 3629 | "owasp": [ |
| 3630 | "A07:2021 - Identification and Authentication Failures" |
| 3631 | ], |
| 3632 | "references": [ |
| 3633 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3634 | ], |
| 3635 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3636 | "subcategory": [ |
| 3637 | "vuln" |
| 3638 | ], |
| 3639 | "technology": [ |
| 3640 | "gitleaks" |
| 3641 | ] |
| 3642 | }, |
| 3643 | "patterns": [ |
| 3644 | { |
| 3645 | "pattern-regex": "(?i)(?:gitter)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3646 | } |
| 3647 | ], |
| 3648 | "severity": "INFO" |
| 3649 | }, |
| 3650 | { |
| 3651 | "id": "vendored-rules.generic.secrets.gitleaks.gocardless-api-token", |
| 3652 | "languages": [ |
| 3653 | "regex" |
| 3654 | ], |
| 3655 | "message": "A gitleaks Gocardless API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3656 | "metadata": { |
| 3657 | "category": "security", |
| 3658 | "confidence": "LOW", |
| 3659 | "cwe": [ |
| 3660 | "CWE-798: Use of Hard-coded Credentials" |
| 3661 | ], |
| 3662 | "cwe2021-top25": true, |
| 3663 | "cwe2022-top25": true, |
| 3664 | "impact": "MEDIUM", |
| 3665 | "likelihood": "LOW", |
| 3666 | "owasp": [ |
| 3667 | "A07:2021 - Identification and Authentication Failures" |
| 3668 | ], |
| 3669 | "references": [ |
| 3670 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3671 | ], |
| 3672 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3673 | "subcategory": [ |
| 3674 | "vuln" |
| 3675 | ], |
| 3676 | "technology": [ |
| 3677 | "gitleaks" |
| 3678 | ] |
| 3679 | }, |
| 3680 | "patterns": [ |
| 3681 | { |
| 3682 | "pattern-regex": "(?i)(?:gocardless)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(live_(?i)[a-z0-9\\-_=]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3683 | } |
| 3684 | ], |
| 3685 | "severity": "INFO" |
| 3686 | }, |
| 3687 | { |
| 3688 | "id": "vendored-rules.generic.secrets.gitleaks.grafana-api-key", |
| 3689 | "languages": [ |
| 3690 | "regex" |
| 3691 | ], |
| 3692 | "message": "A gitleaks Grafana API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3693 | "metadata": { |
| 3694 | "category": "security", |
| 3695 | "confidence": "LOW", |
| 3696 | "cwe": [ |
| 3697 | "CWE-798: Use of Hard-coded Credentials" |
| 3698 | ], |
| 3699 | "cwe2021-top25": true, |
| 3700 | "cwe2022-top25": true, |
| 3701 | "impact": "MEDIUM", |
| 3702 | "likelihood": "LOW", |
| 3703 | "owasp": [ |
| 3704 | "A07:2021 - Identification and Authentication Failures" |
| 3705 | ], |
| 3706 | "references": [ |
| 3707 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3708 | ], |
| 3709 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3710 | "subcategory": [ |
| 3711 | "vuln" |
| 3712 | ], |
| 3713 | "technology": [ |
| 3714 | "gitleaks" |
| 3715 | ] |
| 3716 | }, |
| 3717 | "patterns": [ |
| 3718 | { |
| 3719 | "pattern-regex": "(?i)\\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3720 | } |
| 3721 | ], |
| 3722 | "severity": "INFO" |
| 3723 | }, |
| 3724 | { |
| 3725 | "id": "vendored-rules.generic.secrets.gitleaks.grafana-cloud-api-token", |
| 3726 | "languages": [ |
| 3727 | "regex" |
| 3728 | ], |
| 3729 | "message": "A gitleaks Grafana Cloud API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3730 | "metadata": { |
| 3731 | "category": "security", |
| 3732 | "confidence": "LOW", |
| 3733 | "cwe": [ |
| 3734 | "CWE-798: Use of Hard-coded Credentials" |
| 3735 | ], |
| 3736 | "cwe2021-top25": true, |
| 3737 | "cwe2022-top25": true, |
| 3738 | "impact": "MEDIUM", |
| 3739 | "likelihood": "LOW", |
| 3740 | "owasp": [ |
| 3741 | "A07:2021 - Identification and Authentication Failures" |
| 3742 | ], |
| 3743 | "references": [ |
| 3744 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3745 | ], |
| 3746 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3747 | "subcategory": [ |
| 3748 | "vuln" |
| 3749 | ], |
| 3750 | "technology": [ |
| 3751 | "gitleaks" |
| 3752 | ] |
| 3753 | }, |
| 3754 | "patterns": [ |
| 3755 | { |
| 3756 | "pattern-regex": "(?i)\\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3757 | } |
| 3758 | ], |
| 3759 | "severity": "INFO" |
| 3760 | }, |
| 3761 | { |
| 3762 | "id": "vendored-rules.generic.secrets.gitleaks.grafana-service-account-token", |
| 3763 | "languages": [ |
| 3764 | "regex" |
| 3765 | ], |
| 3766 | "message": "A gitleaks Grafana Service Account Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3767 | "metadata": { |
| 3768 | "category": "security", |
| 3769 | "confidence": "LOW", |
| 3770 | "cwe": [ |
| 3771 | "CWE-798: Use of Hard-coded Credentials" |
| 3772 | ], |
| 3773 | "cwe2021-top25": true, |
| 3774 | "cwe2022-top25": true, |
| 3775 | "impact": "MEDIUM", |
| 3776 | "likelihood": "LOW", |
| 3777 | "owasp": [ |
| 3778 | "A07:2021 - Identification and Authentication Failures" |
| 3779 | ], |
| 3780 | "references": [ |
| 3781 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3782 | ], |
| 3783 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3784 | "subcategory": [ |
| 3785 | "vuln" |
| 3786 | ], |
| 3787 | "technology": [ |
| 3788 | "gitleaks" |
| 3789 | ] |
| 3790 | }, |
| 3791 | "patterns": [ |
| 3792 | { |
| 3793 | "pattern-regex": "(?i)\\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3794 | } |
| 3795 | ], |
| 3796 | "severity": "INFO" |
| 3797 | }, |
| 3798 | { |
| 3799 | "id": "vendored-rules.generic.secrets.gitleaks.harness-api-key", |
| 3800 | "languages": [ |
| 3801 | "regex" |
| 3802 | ], |
| 3803 | "message": "A gitleaks Harness API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3804 | "metadata": { |
| 3805 | "category": "security", |
| 3806 | "confidence": "LOW", |
| 3807 | "cwe": [ |
| 3808 | "CWE-798: Use of Hard-coded Credentials" |
| 3809 | ], |
| 3810 | "cwe2021-top25": true, |
| 3811 | "cwe2022-top25": true, |
| 3812 | "impact": "MEDIUM", |
| 3813 | "likelihood": "LOW", |
| 3814 | "owasp": [ |
| 3815 | "A07:2021 - Identification and Authentication Failures" |
| 3816 | ], |
| 3817 | "references": [ |
| 3818 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3819 | ], |
| 3820 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3821 | "subcategory": [ |
| 3822 | "vuln" |
| 3823 | ], |
| 3824 | "technology": [ |
| 3825 | "gitleaks" |
| 3826 | ] |
| 3827 | }, |
| 3828 | "patterns": [ |
| 3829 | { |
| 3830 | "pattern-regex": "((?:pat|sat)\\.[a-zA-Z0-9]{22}\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{20})" |
| 3831 | } |
| 3832 | ], |
| 3833 | "severity": "INFO" |
| 3834 | }, |
| 3835 | { |
| 3836 | "id": "vendored-rules.generic.secrets.gitleaks.hashicorp-tf-api-token", |
| 3837 | "languages": [ |
| 3838 | "regex" |
| 3839 | ], |
| 3840 | "message": "A gitleaks Hashicorp Tf API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3841 | "metadata": { |
| 3842 | "category": "security", |
| 3843 | "confidence": "LOW", |
| 3844 | "cwe": [ |
| 3845 | "CWE-798: Use of Hard-coded Credentials" |
| 3846 | ], |
| 3847 | "cwe2021-top25": true, |
| 3848 | "cwe2022-top25": true, |
| 3849 | "impact": "MEDIUM", |
| 3850 | "likelihood": "LOW", |
| 3851 | "owasp": [ |
| 3852 | "A07:2021 - Identification and Authentication Failures" |
| 3853 | ], |
| 3854 | "references": [ |
| 3855 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3856 | ], |
| 3857 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3858 | "subcategory": [ |
| 3859 | "vuln" |
| 3860 | ], |
| 3861 | "technology": [ |
| 3862 | "gitleaks" |
| 3863 | ] |
| 3864 | }, |
| 3865 | "patterns": [ |
| 3866 | { |
| 3867 | "pattern-regex": "(?i)[a-z0-9]{14}\\.atlasv1\\.[a-z0-9\\-_=]{60,70}" |
| 3868 | } |
| 3869 | ], |
| 3870 | "severity": "INFO" |
| 3871 | }, |
| 3872 | { |
| 3873 | "id": "vendored-rules.generic.secrets.gitleaks.hashicorp-tf-password", |
| 3874 | "languages": [ |
| 3875 | "regex" |
| 3876 | ], |
| 3877 | "message": "A gitleaks Hashicorp Tf Password detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3878 | "metadata": { |
| 3879 | "category": "security", |
| 3880 | "confidence": "LOW", |
| 3881 | "cwe": [ |
| 3882 | "CWE-798: Use of Hard-coded Credentials" |
| 3883 | ], |
| 3884 | "cwe2021-top25": true, |
| 3885 | "cwe2022-top25": true, |
| 3886 | "impact": "MEDIUM", |
| 3887 | "likelihood": "LOW", |
| 3888 | "owasp": [ |
| 3889 | "A07:2021 - Identification and Authentication Failures" |
| 3890 | ], |
| 3891 | "references": [ |
| 3892 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3893 | ], |
| 3894 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3895 | "subcategory": [ |
| 3896 | "vuln" |
| 3897 | ], |
| 3898 | "technology": [ |
| 3899 | "gitleaks" |
| 3900 | ] |
| 3901 | }, |
| 3902 | "patterns": [ |
| 3903 | { |
| 3904 | "pattern-regex": "(?i)(?:administrator_login_password|password)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(\"[a-z0-9=_\\-]{8,20}\")(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3905 | } |
| 3906 | ], |
| 3907 | "severity": "INFO" |
| 3908 | }, |
| 3909 | { |
| 3910 | "id": "vendored-rules.generic.secrets.gitleaks.heroku-api-key", |
| 3911 | "languages": [ |
| 3912 | "regex" |
| 3913 | ], |
| 3914 | "message": "A gitleaks Heroku API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3915 | "metadata": { |
| 3916 | "category": "security", |
| 3917 | "confidence": "LOW", |
| 3918 | "cwe": [ |
| 3919 | "CWE-798: Use of Hard-coded Credentials" |
| 3920 | ], |
| 3921 | "cwe2021-top25": true, |
| 3922 | "cwe2022-top25": true, |
| 3923 | "impact": "MEDIUM", |
| 3924 | "likelihood": "LOW", |
| 3925 | "owasp": [ |
| 3926 | "A07:2021 - Identification and Authentication Failures" |
| 3927 | ], |
| 3928 | "references": [ |
| 3929 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3930 | ], |
| 3931 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3932 | "subcategory": [ |
| 3933 | "vuln" |
| 3934 | ], |
| 3935 | "technology": [ |
| 3936 | "gitleaks" |
| 3937 | ] |
| 3938 | }, |
| 3939 | "patterns": [ |
| 3940 | { |
| 3941 | "pattern-regex": "(?i)(?:heroku)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3942 | } |
| 3943 | ], |
| 3944 | "severity": "INFO" |
| 3945 | }, |
| 3946 | { |
| 3947 | "id": "vendored-rules.generic.secrets.gitleaks.hubspot-api-key", |
| 3948 | "languages": [ |
| 3949 | "regex" |
| 3950 | ], |
| 3951 | "message": "A gitleaks Hubspot API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3952 | "metadata": { |
| 3953 | "category": "security", |
| 3954 | "confidence": "LOW", |
| 3955 | "cwe": [ |
| 3956 | "CWE-798: Use of Hard-coded Credentials" |
| 3957 | ], |
| 3958 | "cwe2021-top25": true, |
| 3959 | "cwe2022-top25": true, |
| 3960 | "impact": "MEDIUM", |
| 3961 | "likelihood": "LOW", |
| 3962 | "owasp": [ |
| 3963 | "A07:2021 - Identification and Authentication Failures" |
| 3964 | ], |
| 3965 | "references": [ |
| 3966 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 3967 | ], |
| 3968 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 3969 | "subcategory": [ |
| 3970 | "vuln" |
| 3971 | ], |
| 3972 | "technology": [ |
| 3973 | "gitleaks" |
| 3974 | ] |
| 3975 | }, |
| 3976 | "patterns": [ |
| 3977 | { |
| 3978 | "pattern-regex": "(?i)(?:hubspot)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 3979 | } |
| 3980 | ], |
| 3981 | "severity": "INFO" |
| 3982 | }, |
| 3983 | { |
| 3984 | "id": "vendored-rules.generic.secrets.gitleaks.huggingface-access-token", |
| 3985 | "languages": [ |
| 3986 | "regex" |
| 3987 | ], |
| 3988 | "message": "A gitleaks Huggingface Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 3989 | "metadata": { |
| 3990 | "category": "security", |
| 3991 | "confidence": "LOW", |
| 3992 | "cwe": [ |
| 3993 | "CWE-798: Use of Hard-coded Credentials" |
| 3994 | ], |
| 3995 | "cwe2021-top25": true, |
| 3996 | "cwe2022-top25": true, |
| 3997 | "impact": "MEDIUM", |
| 3998 | "likelihood": "LOW", |
| 3999 | "owasp": [ |
| 4000 | "A07:2021 - Identification and Authentication Failures" |
| 4001 | ], |
| 4002 | "references": [ |
| 4003 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4004 | ], |
| 4005 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4006 | "subcategory": [ |
| 4007 | "vuln" |
| 4008 | ], |
| 4009 | "technology": [ |
| 4010 | "gitleaks" |
| 4011 | ] |
| 4012 | }, |
| 4013 | "patterns": [ |
| 4014 | { |
| 4015 | "pattern-regex": "(?:^|[\\\\'\"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\\\'\"` <])" |
| 4016 | } |
| 4017 | ], |
| 4018 | "severity": "INFO" |
| 4019 | }, |
| 4020 | { |
| 4021 | "id": "vendored-rules.generic.secrets.gitleaks.huggingface-organization-api-token", |
| 4022 | "languages": [ |
| 4023 | "regex" |
| 4024 | ], |
| 4025 | "message": "A gitleaks Huggingface Organization API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4026 | "metadata": { |
| 4027 | "category": "security", |
| 4028 | "confidence": "LOW", |
| 4029 | "cwe": [ |
| 4030 | "CWE-798: Use of Hard-coded Credentials" |
| 4031 | ], |
| 4032 | "cwe2021-top25": true, |
| 4033 | "cwe2022-top25": true, |
| 4034 | "impact": "MEDIUM", |
| 4035 | "likelihood": "LOW", |
| 4036 | "owasp": [ |
| 4037 | "A07:2021 - Identification and Authentication Failures" |
| 4038 | ], |
| 4039 | "references": [ |
| 4040 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4041 | ], |
| 4042 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4043 | "subcategory": [ |
| 4044 | "vuln" |
| 4045 | ], |
| 4046 | "technology": [ |
| 4047 | "gitleaks" |
| 4048 | ] |
| 4049 | }, |
| 4050 | "patterns": [ |
| 4051 | { |
| 4052 | "pattern-regex": "(?:^|[\\\\'\"` >=:\\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\\\'\"` <\\),])" |
| 4053 | } |
| 4054 | ], |
| 4055 | "severity": "INFO" |
| 4056 | }, |
| 4057 | { |
| 4058 | "id": "vendored-rules.generic.secrets.gitleaks.infracost-api-token", |
| 4059 | "languages": [ |
| 4060 | "regex" |
| 4061 | ], |
| 4062 | "message": "A gitleaks Infracost API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4063 | "metadata": { |
| 4064 | "category": "security", |
| 4065 | "confidence": "LOW", |
| 4066 | "cwe": [ |
| 4067 | "CWE-798: Use of Hard-coded Credentials" |
| 4068 | ], |
| 4069 | "cwe2021-top25": true, |
| 4070 | "cwe2022-top25": true, |
| 4071 | "impact": "MEDIUM", |
| 4072 | "likelihood": "LOW", |
| 4073 | "owasp": [ |
| 4074 | "A07:2021 - Identification and Authentication Failures" |
| 4075 | ], |
| 4076 | "references": [ |
| 4077 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4078 | ], |
| 4079 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4080 | "subcategory": [ |
| 4081 | "vuln" |
| 4082 | ], |
| 4083 | "technology": [ |
| 4084 | "gitleaks" |
| 4085 | ] |
| 4086 | }, |
| 4087 | "patterns": [ |
| 4088 | { |
| 4089 | "pattern-regex": "(?i)\\b(ico-[a-zA-Z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4090 | } |
| 4091 | ], |
| 4092 | "severity": "INFO" |
| 4093 | }, |
| 4094 | { |
| 4095 | "id": "vendored-rules.generic.secrets.gitleaks.intercom-api-key", |
| 4096 | "languages": [ |
| 4097 | "regex" |
| 4098 | ], |
| 4099 | "message": "A gitleaks Intercom API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4100 | "metadata": { |
| 4101 | "category": "security", |
| 4102 | "confidence": "LOW", |
| 4103 | "cwe": [ |
| 4104 | "CWE-798: Use of Hard-coded Credentials" |
| 4105 | ], |
| 4106 | "cwe2021-top25": true, |
| 4107 | "cwe2022-top25": true, |
| 4108 | "impact": "MEDIUM", |
| 4109 | "likelihood": "LOW", |
| 4110 | "owasp": [ |
| 4111 | "A07:2021 - Identification and Authentication Failures" |
| 4112 | ], |
| 4113 | "references": [ |
| 4114 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4115 | ], |
| 4116 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4117 | "subcategory": [ |
| 4118 | "vuln" |
| 4119 | ], |
| 4120 | "technology": [ |
| 4121 | "gitleaks" |
| 4122 | ] |
| 4123 | }, |
| 4124 | "patterns": [ |
| 4125 | { |
| 4126 | "pattern-regex": "(?i)(?:intercom)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{60})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4127 | } |
| 4128 | ], |
| 4129 | "severity": "INFO" |
| 4130 | }, |
| 4131 | { |
| 4132 | "id": "vendored-rules.generic.secrets.gitleaks.intra42-client-secret", |
| 4133 | "languages": [ |
| 4134 | "regex" |
| 4135 | ], |
| 4136 | "message": "A gitleaks Intra42 Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4137 | "metadata": { |
| 4138 | "category": "security", |
| 4139 | "confidence": "LOW", |
| 4140 | "cwe": [ |
| 4141 | "CWE-798: Use of Hard-coded Credentials" |
| 4142 | ], |
| 4143 | "cwe2021-top25": true, |
| 4144 | "cwe2022-top25": true, |
| 4145 | "impact": "MEDIUM", |
| 4146 | "likelihood": "LOW", |
| 4147 | "owasp": [ |
| 4148 | "A07:2021 - Identification and Authentication Failures" |
| 4149 | ], |
| 4150 | "references": [ |
| 4151 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4152 | ], |
| 4153 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4154 | "subcategory": [ |
| 4155 | "vuln" |
| 4156 | ], |
| 4157 | "technology": [ |
| 4158 | "gitleaks" |
| 4159 | ] |
| 4160 | }, |
| 4161 | "patterns": [ |
| 4162 | { |
| 4163 | "pattern-regex": "(?i)\\b(s-s4t2(?:ud|af)-[abcdef0123456789]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4164 | } |
| 4165 | ], |
| 4166 | "severity": "INFO" |
| 4167 | }, |
| 4168 | { |
| 4169 | "id": "vendored-rules.generic.secrets.gitleaks.jfrog-api-key", |
| 4170 | "languages": [ |
| 4171 | "regex" |
| 4172 | ], |
| 4173 | "message": "A gitleaks Jfrog API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4174 | "metadata": { |
| 4175 | "category": "security", |
| 4176 | "confidence": "LOW", |
| 4177 | "cwe": [ |
| 4178 | "CWE-798: Use of Hard-coded Credentials" |
| 4179 | ], |
| 4180 | "cwe2021-top25": true, |
| 4181 | "cwe2022-top25": true, |
| 4182 | "impact": "MEDIUM", |
| 4183 | "likelihood": "LOW", |
| 4184 | "owasp": [ |
| 4185 | "A07:2021 - Identification and Authentication Failures" |
| 4186 | ], |
| 4187 | "references": [ |
| 4188 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4189 | ], |
| 4190 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4191 | "subcategory": [ |
| 4192 | "vuln" |
| 4193 | ], |
| 4194 | "technology": [ |
| 4195 | "gitleaks" |
| 4196 | ] |
| 4197 | }, |
| 4198 | "patterns": [ |
| 4199 | { |
| 4200 | "pattern-regex": "(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{73})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4201 | } |
| 4202 | ], |
| 4203 | "severity": "INFO" |
| 4204 | }, |
| 4205 | { |
| 4206 | "id": "vendored-rules.generic.secrets.gitleaks.jfrog-identity-token", |
| 4207 | "languages": [ |
| 4208 | "regex" |
| 4209 | ], |
| 4210 | "message": "A gitleaks Jfrog Identity Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4211 | "metadata": { |
| 4212 | "category": "security", |
| 4213 | "confidence": "LOW", |
| 4214 | "cwe": [ |
| 4215 | "CWE-798: Use of Hard-coded Credentials" |
| 4216 | ], |
| 4217 | "cwe2021-top25": true, |
| 4218 | "cwe2022-top25": true, |
| 4219 | "impact": "MEDIUM", |
| 4220 | "likelihood": "LOW", |
| 4221 | "owasp": [ |
| 4222 | "A07:2021 - Identification and Authentication Failures" |
| 4223 | ], |
| 4224 | "references": [ |
| 4225 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4226 | ], |
| 4227 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4228 | "subcategory": [ |
| 4229 | "vuln" |
| 4230 | ], |
| 4231 | "technology": [ |
| 4232 | "gitleaks" |
| 4233 | ] |
| 4234 | }, |
| 4235 | "patterns": [ |
| 4236 | { |
| 4237 | "pattern-regex": "(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4238 | } |
| 4239 | ], |
| 4240 | "severity": "INFO" |
| 4241 | }, |
| 4242 | { |
| 4243 | "id": "vendored-rules.generic.secrets.gitleaks.jwt-base64", |
| 4244 | "languages": [ |
| 4245 | "regex" |
| 4246 | ], |
| 4247 | "message": "A gitleaks JWT Base64 credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4248 | "metadata": { |
| 4249 | "category": "security", |
| 4250 | "confidence": "LOW", |
| 4251 | "cwe": [ |
| 4252 | "CWE-798: Use of Hard-coded Credentials" |
| 4253 | ], |
| 4254 | "cwe2021-top25": true, |
| 4255 | "cwe2022-top25": true, |
| 4256 | "impact": "MEDIUM", |
| 4257 | "likelihood": "LOW", |
| 4258 | "owasp": [ |
| 4259 | "A07:2021 - Identification and Authentication Failures" |
| 4260 | ], |
| 4261 | "references": [ |
| 4262 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4263 | ], |
| 4264 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4265 | "subcategory": [ |
| 4266 | "vuln" |
| 4267 | ], |
| 4268 | "technology": [ |
| 4269 | "gitleaks" |
| 4270 | ] |
| 4271 | }, |
| 4272 | "patterns": [ |
| 4273 | { |
| 4274 | "pattern-regex": "\\bZXlK(?:(?P<alg>aGJHY2lPaU)|(?P<apu>aGNIVWlPaU)|(?P<apv>aGNIWWlPaU)|(?P<aud>aGRXUWlPaU)|(?P<b64>aU5qUWlP)|(?P<crit>amNtbDBJanBi)|(?P<cty>amRIa2lPaU)|(?P<epk>bGNHc2lPbn)|(?P<enc>bGJtTWlPaU)|(?P<jku>cWEzVWlPaU)|(?P<jwk>cWQyc2lPb)|(?P<iss>cGMzTWlPaU)|(?P<iv>cGRpSTZJ)|(?P<kid>cmFXUWlP)|(?P<key_ops>clpYbGZiM0J6SWpwY)|(?P<kty>cmRIa2lPaUp)|(?P<nonce>dWIyNWpaU0k2)|(?P<p2c>d01tTWlP)|(?P<p2s>d01uTWlPaU)|(?P<ppt>d2NIUWlPaU)|(?P<sub>emRXSWlPaU)|(?P<svt>emRuUWlP)|(?P<tag>MFlXY2lPaU)|(?P<typ>MGVYQWlPaUp)|(?P<url>MWNtd2l)|(?P<use>MWMyVWlPaUp)|(?P<ver>MlpYSWlPaU)|(?P<version>MlpYSnphVzl1SWpv)|(?P<x>NElqb2)|(?P<x5c>NE5XTWlP)|(?P<x5t>NE5YUWlPaU)|(?P<x5ts256>NE5YUWpVekkxTmlJNkl)|(?P<x5u>NE5YVWlPaU)|(?P<zip>NmFYQWlPaU))[a-zA-Z0-9\\/\\\\_+\\-\\r\\n]{40,}={0,2}" |
| 4275 | } |
| 4276 | ], |
| 4277 | "severity": "INFO" |
| 4278 | }, |
| 4279 | { |
| 4280 | "id": "vendored-rules.generic.secrets.gitleaks.jwt", |
| 4281 | "languages": [ |
| 4282 | "regex" |
| 4283 | ], |
| 4284 | "message": "A gitleaks JWT credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4285 | "metadata": { |
| 4286 | "category": "security", |
| 4287 | "confidence": "LOW", |
| 4288 | "cwe": [ |
| 4289 | "CWE-798: Use of Hard-coded Credentials" |
| 4290 | ], |
| 4291 | "cwe2021-top25": true, |
| 4292 | "cwe2022-top25": true, |
| 4293 | "impact": "MEDIUM", |
| 4294 | "likelihood": "LOW", |
| 4295 | "owasp": [ |
| 4296 | "A07:2021 - Identification and Authentication Failures" |
| 4297 | ], |
| 4298 | "references": [ |
| 4299 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4300 | ], |
| 4301 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4302 | "subcategory": [ |
| 4303 | "vuln" |
| 4304 | ], |
| 4305 | "technology": [ |
| 4306 | "gitleaks" |
| 4307 | ] |
| 4308 | }, |
| 4309 | "patterns": [ |
| 4310 | { |
| 4311 | "pattern-regex": "\\b(ey[a-zA-Z0-9]{17,}\\.ey[a-zA-Z0-9\\/\\\\_-]{17,}\\.(?:[a-zA-Z0-9\\/\\\\_-]{10,}={0,2})?)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4312 | } |
| 4313 | ], |
| 4314 | "severity": "INFO" |
| 4315 | }, |
| 4316 | { |
| 4317 | "id": "vendored-rules.generic.secrets.gitleaks.kraken-access-token", |
| 4318 | "languages": [ |
| 4319 | "regex" |
| 4320 | ], |
| 4321 | "message": "A gitleaks Kraken Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4322 | "metadata": { |
| 4323 | "category": "security", |
| 4324 | "confidence": "LOW", |
| 4325 | "cwe": [ |
| 4326 | "CWE-798: Use of Hard-coded Credentials" |
| 4327 | ], |
| 4328 | "cwe2021-top25": true, |
| 4329 | "cwe2022-top25": true, |
| 4330 | "impact": "MEDIUM", |
| 4331 | "likelihood": "LOW", |
| 4332 | "owasp": [ |
| 4333 | "A07:2021 - Identification and Authentication Failures" |
| 4334 | ], |
| 4335 | "references": [ |
| 4336 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4337 | ], |
| 4338 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4339 | "subcategory": [ |
| 4340 | "vuln" |
| 4341 | ], |
| 4342 | "technology": [ |
| 4343 | "gitleaks" |
| 4344 | ] |
| 4345 | }, |
| 4346 | "patterns": [ |
| 4347 | { |
| 4348 | "pattern-regex": "(?i)(?:kraken)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9\\/=_\\+\\-]{80,90})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4349 | } |
| 4350 | ], |
| 4351 | "severity": "INFO" |
| 4352 | }, |
| 4353 | { |
| 4354 | "id": "vendored-rules.generic.secrets.gitleaks.kucoin-access-token", |
| 4355 | "languages": [ |
| 4356 | "regex" |
| 4357 | ], |
| 4358 | "message": "A gitleaks Kucoin Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4359 | "metadata": { |
| 4360 | "category": "security", |
| 4361 | "confidence": "LOW", |
| 4362 | "cwe": [ |
| 4363 | "CWE-798: Use of Hard-coded Credentials" |
| 4364 | ], |
| 4365 | "cwe2021-top25": true, |
| 4366 | "cwe2022-top25": true, |
| 4367 | "impact": "MEDIUM", |
| 4368 | "likelihood": "LOW", |
| 4369 | "owasp": [ |
| 4370 | "A07:2021 - Identification and Authentication Failures" |
| 4371 | ], |
| 4372 | "references": [ |
| 4373 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4374 | ], |
| 4375 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4376 | "subcategory": [ |
| 4377 | "vuln" |
| 4378 | ], |
| 4379 | "technology": [ |
| 4380 | "gitleaks" |
| 4381 | ] |
| 4382 | }, |
| 4383 | "patterns": [ |
| 4384 | { |
| 4385 | "pattern-regex": "(?i)(?:kucoin)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4386 | } |
| 4387 | ], |
| 4388 | "severity": "INFO" |
| 4389 | }, |
| 4390 | { |
| 4391 | "id": "vendored-rules.generic.secrets.gitleaks.kucoin-secret-key", |
| 4392 | "languages": [ |
| 4393 | "regex" |
| 4394 | ], |
| 4395 | "message": "A gitleaks Kucoin Secret Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4396 | "metadata": { |
| 4397 | "category": "security", |
| 4398 | "confidence": "LOW", |
| 4399 | "cwe": [ |
| 4400 | "CWE-798: Use of Hard-coded Credentials" |
| 4401 | ], |
| 4402 | "cwe2021-top25": true, |
| 4403 | "cwe2022-top25": true, |
| 4404 | "impact": "MEDIUM", |
| 4405 | "likelihood": "LOW", |
| 4406 | "owasp": [ |
| 4407 | "A07:2021 - Identification and Authentication Failures" |
| 4408 | ], |
| 4409 | "references": [ |
| 4410 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4411 | ], |
| 4412 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4413 | "subcategory": [ |
| 4414 | "vuln" |
| 4415 | ], |
| 4416 | "technology": [ |
| 4417 | "gitleaks" |
| 4418 | ] |
| 4419 | }, |
| 4420 | "patterns": [ |
| 4421 | { |
| 4422 | "pattern-regex": "(?i)(?:kucoin)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4423 | } |
| 4424 | ], |
| 4425 | "severity": "INFO" |
| 4426 | }, |
| 4427 | { |
| 4428 | "id": "vendored-rules.generic.secrets.gitleaks.launchdarkly-access-token", |
| 4429 | "languages": [ |
| 4430 | "regex" |
| 4431 | ], |
| 4432 | "message": "A gitleaks Launchdarkly Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4433 | "metadata": { |
| 4434 | "category": "security", |
| 4435 | "confidence": "LOW", |
| 4436 | "cwe": [ |
| 4437 | "CWE-798: Use of Hard-coded Credentials" |
| 4438 | ], |
| 4439 | "cwe2021-top25": true, |
| 4440 | "cwe2022-top25": true, |
| 4441 | "impact": "MEDIUM", |
| 4442 | "likelihood": "LOW", |
| 4443 | "owasp": [ |
| 4444 | "A07:2021 - Identification and Authentication Failures" |
| 4445 | ], |
| 4446 | "references": [ |
| 4447 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4448 | ], |
| 4449 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4450 | "subcategory": [ |
| 4451 | "vuln" |
| 4452 | ], |
| 4453 | "technology": [ |
| 4454 | "gitleaks" |
| 4455 | ] |
| 4456 | }, |
| 4457 | "patterns": [ |
| 4458 | { |
| 4459 | "pattern-regex": "(?i)(?:launchdarkly)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4460 | } |
| 4461 | ], |
| 4462 | "severity": "INFO" |
| 4463 | }, |
| 4464 | { |
| 4465 | "id": "vendored-rules.generic.secrets.gitleaks.linear-api-key", |
| 4466 | "languages": [ |
| 4467 | "regex" |
| 4468 | ], |
| 4469 | "message": "A gitleaks Linear API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4470 | "metadata": { |
| 4471 | "category": "security", |
| 4472 | "confidence": "LOW", |
| 4473 | "cwe": [ |
| 4474 | "CWE-798: Use of Hard-coded Credentials" |
| 4475 | ], |
| 4476 | "cwe2021-top25": true, |
| 4477 | "cwe2022-top25": true, |
| 4478 | "impact": "MEDIUM", |
| 4479 | "likelihood": "LOW", |
| 4480 | "owasp": [ |
| 4481 | "A07:2021 - Identification and Authentication Failures" |
| 4482 | ], |
| 4483 | "references": [ |
| 4484 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4485 | ], |
| 4486 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4487 | "subcategory": [ |
| 4488 | "vuln" |
| 4489 | ], |
| 4490 | "technology": [ |
| 4491 | "gitleaks" |
| 4492 | ] |
| 4493 | }, |
| 4494 | "patterns": [ |
| 4495 | { |
| 4496 | "pattern-regex": "lin_api_(?i)[a-z0-9]{40}" |
| 4497 | } |
| 4498 | ], |
| 4499 | "severity": "INFO" |
| 4500 | }, |
| 4501 | { |
| 4502 | "id": "vendored-rules.generic.secrets.gitleaks.linear-client-secret", |
| 4503 | "languages": [ |
| 4504 | "regex" |
| 4505 | ], |
| 4506 | "message": "A gitleaks Linear Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4507 | "metadata": { |
| 4508 | "category": "security", |
| 4509 | "confidence": "LOW", |
| 4510 | "cwe": [ |
| 4511 | "CWE-798: Use of Hard-coded Credentials" |
| 4512 | ], |
| 4513 | "cwe2021-top25": true, |
| 4514 | "cwe2022-top25": true, |
| 4515 | "impact": "MEDIUM", |
| 4516 | "likelihood": "LOW", |
| 4517 | "owasp": [ |
| 4518 | "A07:2021 - Identification and Authentication Failures" |
| 4519 | ], |
| 4520 | "references": [ |
| 4521 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4522 | ], |
| 4523 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4524 | "subcategory": [ |
| 4525 | "vuln" |
| 4526 | ], |
| 4527 | "technology": [ |
| 4528 | "gitleaks" |
| 4529 | ] |
| 4530 | }, |
| 4531 | "patterns": [ |
| 4532 | { |
| 4533 | "pattern-regex": "(?i)(?:linear)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4534 | } |
| 4535 | ], |
| 4536 | "severity": "INFO" |
| 4537 | }, |
| 4538 | { |
| 4539 | "id": "vendored-rules.generic.secrets.gitleaks.linkedin-client-id", |
| 4540 | "languages": [ |
| 4541 | "regex" |
| 4542 | ], |
| 4543 | "message": "A gitleaks Linkedin Client ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4544 | "metadata": { |
| 4545 | "category": "security", |
| 4546 | "confidence": "LOW", |
| 4547 | "cwe": [ |
| 4548 | "CWE-798: Use of Hard-coded Credentials" |
| 4549 | ], |
| 4550 | "cwe2021-top25": true, |
| 4551 | "cwe2022-top25": true, |
| 4552 | "impact": "MEDIUM", |
| 4553 | "likelihood": "LOW", |
| 4554 | "owasp": [ |
| 4555 | "A07:2021 - Identification and Authentication Failures" |
| 4556 | ], |
| 4557 | "references": [ |
| 4558 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4559 | ], |
| 4560 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4561 | "subcategory": [ |
| 4562 | "vuln" |
| 4563 | ], |
| 4564 | "technology": [ |
| 4565 | "gitleaks" |
| 4566 | ] |
| 4567 | }, |
| 4568 | "patterns": [ |
| 4569 | { |
| 4570 | "pattern-regex": "(?i)(?:linkedin|linked-in)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{14})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4571 | } |
| 4572 | ], |
| 4573 | "severity": "INFO" |
| 4574 | }, |
| 4575 | { |
| 4576 | "id": "vendored-rules.generic.secrets.gitleaks.linkedin-client-secret", |
| 4577 | "languages": [ |
| 4578 | "regex" |
| 4579 | ], |
| 4580 | "message": "A gitleaks Linkedin Client Secret detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4581 | "metadata": { |
| 4582 | "category": "security", |
| 4583 | "confidence": "LOW", |
| 4584 | "cwe": [ |
| 4585 | "CWE-798: Use of Hard-coded Credentials" |
| 4586 | ], |
| 4587 | "cwe2021-top25": true, |
| 4588 | "cwe2022-top25": true, |
| 4589 | "impact": "MEDIUM", |
| 4590 | "likelihood": "LOW", |
| 4591 | "owasp": [ |
| 4592 | "A07:2021 - Identification and Authentication Failures" |
| 4593 | ], |
| 4594 | "references": [ |
| 4595 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4596 | ], |
| 4597 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4598 | "subcategory": [ |
| 4599 | "vuln" |
| 4600 | ], |
| 4601 | "technology": [ |
| 4602 | "gitleaks" |
| 4603 | ] |
| 4604 | }, |
| 4605 | "patterns": [ |
| 4606 | { |
| 4607 | "pattern-regex": "(?i)(?:linkedin|linked-in)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4608 | } |
| 4609 | ], |
| 4610 | "severity": "INFO" |
| 4611 | }, |
| 4612 | { |
| 4613 | "id": "vendored-rules.generic.secrets.gitleaks.lob-api-key", |
| 4614 | "languages": [ |
| 4615 | "regex" |
| 4616 | ], |
| 4617 | "message": "A gitleaks Lob API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4618 | "metadata": { |
| 4619 | "category": "security", |
| 4620 | "confidence": "LOW", |
| 4621 | "cwe": [ |
| 4622 | "CWE-798: Use of Hard-coded Credentials" |
| 4623 | ], |
| 4624 | "cwe2021-top25": true, |
| 4625 | "cwe2022-top25": true, |
| 4626 | "impact": "MEDIUM", |
| 4627 | "likelihood": "LOW", |
| 4628 | "owasp": [ |
| 4629 | "A07:2021 - Identification and Authentication Failures" |
| 4630 | ], |
| 4631 | "references": [ |
| 4632 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4633 | ], |
| 4634 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4635 | "subcategory": [ |
| 4636 | "vuln" |
| 4637 | ], |
| 4638 | "technology": [ |
| 4639 | "gitleaks" |
| 4640 | ] |
| 4641 | }, |
| 4642 | "patterns": [ |
| 4643 | { |
| 4644 | "pattern-regex": "(?i)(?:lob)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4645 | } |
| 4646 | ], |
| 4647 | "severity": "INFO" |
| 4648 | }, |
| 4649 | { |
| 4650 | "id": "vendored-rules.generic.secrets.gitleaks.lob-pub-api-key", |
| 4651 | "languages": [ |
| 4652 | "regex" |
| 4653 | ], |
| 4654 | "message": "A gitleaks Lob Pub API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4655 | "metadata": { |
| 4656 | "category": "security", |
| 4657 | "confidence": "LOW", |
| 4658 | "cwe": [ |
| 4659 | "CWE-798: Use of Hard-coded Credentials" |
| 4660 | ], |
| 4661 | "cwe2021-top25": true, |
| 4662 | "cwe2022-top25": true, |
| 4663 | "impact": "MEDIUM", |
| 4664 | "likelihood": "LOW", |
| 4665 | "owasp": [ |
| 4666 | "A07:2021 - Identification and Authentication Failures" |
| 4667 | ], |
| 4668 | "references": [ |
| 4669 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4670 | ], |
| 4671 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4672 | "subcategory": [ |
| 4673 | "vuln" |
| 4674 | ], |
| 4675 | "technology": [ |
| 4676 | "gitleaks" |
| 4677 | ] |
| 4678 | }, |
| 4679 | "patterns": [ |
| 4680 | { |
| 4681 | "pattern-regex": "(?i)(?:lob)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4682 | } |
| 4683 | ], |
| 4684 | "severity": "INFO" |
| 4685 | }, |
| 4686 | { |
| 4687 | "id": "vendored-rules.generic.secrets.gitleaks.mailchimp-api-key", |
| 4688 | "languages": [ |
| 4689 | "regex" |
| 4690 | ], |
| 4691 | "message": "A gitleaks Mailchimp API Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4692 | "metadata": { |
| 4693 | "category": "security", |
| 4694 | "confidence": "LOW", |
| 4695 | "cwe": [ |
| 4696 | "CWE-798: Use of Hard-coded Credentials" |
| 4697 | ], |
| 4698 | "cwe2021-top25": true, |
| 4699 | "cwe2022-top25": true, |
| 4700 | "impact": "MEDIUM", |
| 4701 | "likelihood": "LOW", |
| 4702 | "owasp": [ |
| 4703 | "A07:2021 - Identification and Authentication Failures" |
| 4704 | ], |
| 4705 | "references": [ |
| 4706 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4707 | ], |
| 4708 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4709 | "subcategory": [ |
| 4710 | "vuln" |
| 4711 | ], |
| 4712 | "technology": [ |
| 4713 | "gitleaks" |
| 4714 | ] |
| 4715 | }, |
| 4716 | "patterns": [ |
| 4717 | { |
| 4718 | "pattern-regex": "(?i)(?:MailchimpSDK.initialize|mailchimp)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32}-us\\d\\d)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4719 | } |
| 4720 | ], |
| 4721 | "severity": "INFO" |
| 4722 | }, |
| 4723 | { |
| 4724 | "id": "vendored-rules.generic.secrets.gitleaks.mailgun-private-api-token", |
| 4725 | "languages": [ |
| 4726 | "regex" |
| 4727 | ], |
| 4728 | "message": "A gitleaks Mailgun Private API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4729 | "metadata": { |
| 4730 | "category": "security", |
| 4731 | "confidence": "LOW", |
| 4732 | "cwe": [ |
| 4733 | "CWE-798: Use of Hard-coded Credentials" |
| 4734 | ], |
| 4735 | "cwe2021-top25": true, |
| 4736 | "cwe2022-top25": true, |
| 4737 | "impact": "MEDIUM", |
| 4738 | "likelihood": "LOW", |
| 4739 | "owasp": [ |
| 4740 | "A07:2021 - Identification and Authentication Failures" |
| 4741 | ], |
| 4742 | "references": [ |
| 4743 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4744 | ], |
| 4745 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4746 | "subcategory": [ |
| 4747 | "vuln" |
| 4748 | ], |
| 4749 | "technology": [ |
| 4750 | "gitleaks" |
| 4751 | ] |
| 4752 | }, |
| 4753 | "patterns": [ |
| 4754 | { |
| 4755 | "pattern-regex": "(?i)(?:mailgun)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(key-[a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4756 | } |
| 4757 | ], |
| 4758 | "severity": "INFO" |
| 4759 | }, |
| 4760 | { |
| 4761 | "id": "vendored-rules.generic.secrets.gitleaks.mailgun-pub-key", |
| 4762 | "languages": [ |
| 4763 | "regex" |
| 4764 | ], |
| 4765 | "message": "A gitleaks Mailgun Pub Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4766 | "metadata": { |
| 4767 | "category": "security", |
| 4768 | "confidence": "LOW", |
| 4769 | "cwe": [ |
| 4770 | "CWE-798: Use of Hard-coded Credentials" |
| 4771 | ], |
| 4772 | "cwe2021-top25": true, |
| 4773 | "cwe2022-top25": true, |
| 4774 | "impact": "MEDIUM", |
| 4775 | "likelihood": "LOW", |
| 4776 | "owasp": [ |
| 4777 | "A07:2021 - Identification and Authentication Failures" |
| 4778 | ], |
| 4779 | "references": [ |
| 4780 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4781 | ], |
| 4782 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4783 | "subcategory": [ |
| 4784 | "vuln" |
| 4785 | ], |
| 4786 | "technology": [ |
| 4787 | "gitleaks" |
| 4788 | ] |
| 4789 | }, |
| 4790 | "patterns": [ |
| 4791 | { |
| 4792 | "pattern-regex": "(?i)(?:mailgun)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4793 | } |
| 4794 | ], |
| 4795 | "severity": "INFO" |
| 4796 | }, |
| 4797 | { |
| 4798 | "id": "vendored-rules.generic.secrets.gitleaks.mailgun-signing-key", |
| 4799 | "languages": [ |
| 4800 | "regex" |
| 4801 | ], |
| 4802 | "message": "A gitleaks Mailgun Signing Key detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4803 | "metadata": { |
| 4804 | "category": "security", |
| 4805 | "confidence": "LOW", |
| 4806 | "cwe": [ |
| 4807 | "CWE-798: Use of Hard-coded Credentials" |
| 4808 | ], |
| 4809 | "cwe2021-top25": true, |
| 4810 | "cwe2022-top25": true, |
| 4811 | "impact": "MEDIUM", |
| 4812 | "likelihood": "LOW", |
| 4813 | "owasp": [ |
| 4814 | "A07:2021 - Identification and Authentication Failures" |
| 4815 | ], |
| 4816 | "references": [ |
| 4817 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4818 | ], |
| 4819 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4820 | "subcategory": [ |
| 4821 | "vuln" |
| 4822 | ], |
| 4823 | "technology": [ |
| 4824 | "gitleaks" |
| 4825 | ] |
| 4826 | }, |
| 4827 | "patterns": [ |
| 4828 | { |
| 4829 | "pattern-regex": "(?i)(?:mailgun)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4830 | } |
| 4831 | ], |
| 4832 | "severity": "INFO" |
| 4833 | }, |
| 4834 | { |
| 4835 | "id": "vendored-rules.generic.secrets.gitleaks.mapbox-api-token", |
| 4836 | "languages": [ |
| 4837 | "regex" |
| 4838 | ], |
| 4839 | "message": "A gitleaks Mapbox API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4840 | "metadata": { |
| 4841 | "category": "security", |
| 4842 | "confidence": "LOW", |
| 4843 | "cwe": [ |
| 4844 | "CWE-798: Use of Hard-coded Credentials" |
| 4845 | ], |
| 4846 | "cwe2021-top25": true, |
| 4847 | "cwe2022-top25": true, |
| 4848 | "impact": "MEDIUM", |
| 4849 | "likelihood": "LOW", |
| 4850 | "owasp": [ |
| 4851 | "A07:2021 - Identification and Authentication Failures" |
| 4852 | ], |
| 4853 | "references": [ |
| 4854 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4855 | ], |
| 4856 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4857 | "subcategory": [ |
| 4858 | "vuln" |
| 4859 | ], |
| 4860 | "technology": [ |
| 4861 | "gitleaks" |
| 4862 | ] |
| 4863 | }, |
| 4864 | "patterns": [ |
| 4865 | { |
| 4866 | "pattern-regex": "(?i)(?:mapbox)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4867 | } |
| 4868 | ], |
| 4869 | "severity": "INFO" |
| 4870 | }, |
| 4871 | { |
| 4872 | "id": "vendored-rules.generic.secrets.gitleaks.mattermost-access-token", |
| 4873 | "languages": [ |
| 4874 | "regex" |
| 4875 | ], |
| 4876 | "message": "A gitleaks Mattermost Access Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4877 | "metadata": { |
| 4878 | "category": "security", |
| 4879 | "confidence": "LOW", |
| 4880 | "cwe": [ |
| 4881 | "CWE-798: Use of Hard-coded Credentials" |
| 4882 | ], |
| 4883 | "cwe2021-top25": true, |
| 4884 | "cwe2022-top25": true, |
| 4885 | "impact": "MEDIUM", |
| 4886 | "likelihood": "LOW", |
| 4887 | "owasp": [ |
| 4888 | "A07:2021 - Identification and Authentication Failures" |
| 4889 | ], |
| 4890 | "references": [ |
| 4891 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4892 | ], |
| 4893 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4894 | "subcategory": [ |
| 4895 | "vuln" |
| 4896 | ], |
| 4897 | "technology": [ |
| 4898 | "gitleaks" |
| 4899 | ] |
| 4900 | }, |
| 4901 | "patterns": [ |
| 4902 | { |
| 4903 | "pattern-regex": "(?i)(?:mattermost)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{26})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4904 | } |
| 4905 | ], |
| 4906 | "severity": "INFO" |
| 4907 | }, |
| 4908 | { |
| 4909 | "id": "vendored-rules.generic.secrets.gitleaks.messagebird-api-token", |
| 4910 | "languages": [ |
| 4911 | "regex" |
| 4912 | ], |
| 4913 | "message": "A gitleaks Messagebird API Token detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4914 | "metadata": { |
| 4915 | "category": "security", |
| 4916 | "confidence": "LOW", |
| 4917 | "cwe": [ |
| 4918 | "CWE-798: Use of Hard-coded Credentials" |
| 4919 | ], |
| 4920 | "cwe2021-top25": true, |
| 4921 | "cwe2022-top25": true, |
| 4922 | "impact": "MEDIUM", |
| 4923 | "likelihood": "LOW", |
| 4924 | "owasp": [ |
| 4925 | "A07:2021 - Identification and Authentication Failures" |
| 4926 | ], |
| 4927 | "references": [ |
| 4928 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4929 | ], |
| 4930 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4931 | "subcategory": [ |
| 4932 | "vuln" |
| 4933 | ], |
| 4934 | "technology": [ |
| 4935 | "gitleaks" |
| 4936 | ] |
| 4937 | }, |
| 4938 | "patterns": [ |
| 4939 | { |
| 4940 | "pattern-regex": "(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{25})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4941 | } |
| 4942 | ], |
| 4943 | "severity": "INFO" |
| 4944 | }, |
| 4945 | { |
| 4946 | "id": "vendored-rules.generic.secrets.gitleaks.messagebird-client-id", |
| 4947 | "languages": [ |
| 4948 | "regex" |
| 4949 | ], |
| 4950 | "message": "A gitleaks Messagebird Client ID detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4951 | "metadata": { |
| 4952 | "category": "security", |
| 4953 | "confidence": "LOW", |
| 4954 | "cwe": [ |
| 4955 | "CWE-798: Use of Hard-coded Credentials" |
| 4956 | ], |
| 4957 | "cwe2021-top25": true, |
| 4958 | "cwe2022-top25": true, |
| 4959 | "impact": "MEDIUM", |
| 4960 | "likelihood": "LOW", |
| 4961 | "owasp": [ |
| 4962 | "A07:2021 - Identification and Authentication Failures" |
| 4963 | ], |
| 4964 | "references": [ |
| 4965 | "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" |
| 4966 | ], |
| 4967 | "source-rule-url": "https://github.com/zricethezav/gitleaks/tree/master/cmd/generate/config/rules", |
| 4968 | "subcategory": [ |
| 4969 | "vuln" |
| 4970 | ], |
| 4971 | "technology": [ |
| 4972 | "gitleaks" |
| 4973 | ] |
| 4974 | }, |
| 4975 | "patterns": [ |
| 4976 | { |
| 4977 | "pattern-regex": "(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\\-_\\t .]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)" |
| 4978 | } |
| 4979 | ], |
| 4980 | "severity": "INFO" |
| 4981 | }, |
| 4982 | { |
| 4983 | "id": "vendored-rules.generic.secrets.gitleaks.microsoft-teams-webhook", |
| 4984 | "languages": [ |
| 4985 | "regex" |
| 4986 | ], |
| 4987 | "message": "A gitleaks Microsoft Teams Webhook credential detected. Avoid hardcoding credentials directly in connection strings as this creates security risks. Instead, use environment variables to store and access credentials at runtime. If you need the actual credential values to make this work properly, ask me to provide them through Replit's secret system.", |
| 4988 | "metadata": { |
| 4989 | "category": "security", |
| 4990 | "confidence": "LOW", |
| 4991 | "cwe": [ |
| 4992 | "CWE-798: Use of Hard-coded Credentials" |
| 4993 | ], |
| 4994 | "cwe2021-top25": true, |
| 4995 | "cwe2022-top25": true, |
| 4996 | "impact": "MEDIUM", |
| 4997 | "likelihood": "LOW", |
| 4998 | "owasp": [ |
| 4999 | "A07:2021 - Identification and Authentication Failures" |
| 5000 | ], |
Showing first 5,000 of 51,879 lines.
View raw